e891f78a266e0c72e86cc6164dbd199f98e6c3f1a830b0185c1e5118092c461a

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 e891f78a266e0c72e86cc6164dbd199f98e6c3f1a830b0185c1e5118092c461a
MD5 200d9fd5a05344273a986a42a29d6043
SHA1 463c1215a8473d4c135af40a5c583544a32a3f17
SHA512 16102a69aaf1289360f7551badf7b334a654481fb318d17b8d8c14004d325d92a052f70068ddc33fa005299fdbe89523cd67b09216d3a6a410736aa9b777db64
SSDEEP 24576:jG8VwDHu09EfvV973tch85j+nJuhUwY+s6iA4GuaJjt8+:qyjvV97dcyjIJuJ26Id+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

e8:68:55:aa:40:93:d5:60:60:d9:4b:88:ee:04:d2:9a:4a:44:3e:0e:64:c0:b0:cf:7b:84:c6:5e:7e:2f:c4:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Recipienttilsynet,O=Recipienttilsynet,L=Savignac-Mona,ST=Occitanie,C=FR,1.2.840.113549.1.9.1=#0c26456b737065646974696f6e737365646c65726e6573405374616d66756e6b74696f6e2e486a6c

Chains

Apr 13, 2025

Minor OS version

0

Major OS version

4

Entry point

13615

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Agerhnsjagter.ude

SHA256 5316656b31b74bcba43d6b915d72d0482bf200301175b263b4f0c443cbc172ae
MD5 06b3b857ff707aa159e740656e23d6b9
SHA1 28631c7af93ad808585da54df1d7eaf1e295a955
SHA512 33ba38e0b5775b4f2d26ce58bbcd280ec869e7abf41036d04db8ee62f408a7a1fdc6227d1443eb0ea70db21cbfdcdcdb06d2b6cdca7f54828c35918d443c7661
SSDEEP 1536:yFjIkkLsJKllHzXpif/M1rsbk6YnYu7mvyLKtZ+7tySz6/VmPCFsLu9OYMtRt8Zd:9iQRi
MD5 SHA1 SHA512 SSDEEP

Elek.jpg

SHA256 6a444313c0ac6bd9831c727b382a98bdc8cb055d7cd72e19909fd252db8d6cb9
MD5 e90c3fe2fa2b3ed70f15cbe379911800
SHA1 692af1be905deccf2042025c46c636c206cf2500
SHA512 983df334d384dd3c3ece19331bc9f4a974578c433fc4503d75b7842678d3164db3fe579739c25a17511f4e63c0d2a84d0326c201e90f85a95e2014d4ce70e1bc
SSDEEP 384:O8fKSlwikAdTWV0U+MQGUPZIRSwIroXHk34aaJNNyoBxcq:O8CipVTWV4RLSJIroXkoZJNNyoD1
MD5 SHA1 SHA512 SSDEEP

Lyophilizer.Con

SHA256 65b67401e21bac769fb1f4f03ebb41f6b47e85bdf476360082319aa0d32737e2
MD5 c457123e080949ec00063dfac53cc939
SHA1 cf7a8c8c85e38cc5f1668aa22354dcdf87598ab6
SHA512 b28e6283ba605d5df46bfeb11009fb875414b0fb22ea78c3ef1c0a52bebfe66261f7ab315713fa3ad8f2b30ce94ad2a084422b3931b303aa3dd06dcd6a1e2e3d
SSDEEP 12288:EWef0r9jMhOmiM3jZymBFoqNCedKDXro71:EWef0RjMhyM3jZzBFNCwKW
MD5 SHA1 SHA512 SSDEEP

Pneumatolitic.Fib

SHA256 53b64aa048464f619ed0f4027a0f8efa7d03c715d15e9521ff68ed40d2df77b2
MD5 9e7e0b03768d2807c27c66ccbdbc1bdd
SHA1 8904168aa88dc30a0a347429a441709c159a5234
SHA512 66da94e4e3c662f80b4943cee0aab295e0c14f0bb9487f2c532cca845ba75b6d30a9b0d0b9a23d5fefdcee7492f083aacc9d2f4f7257d92f2daf375fef61d450
SSDEEP 1536:1PU1mxmdyHzV6fuw29dkgR1jr9JDzU/+R+LE6fN08+0UUwk:1PU1YmCziC9iyrz3UEGm3I
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/Ungarlanded.ini

SHA256 d1ccf61f7a17b170f1c1e889cf1786171969344eed968f5202b2389147b5ca72
MD5 a5130cae3dc8c83a732528a90ac8d3cb
SHA1 72bcb025f9d8370f4deed8be097d00e90e0f293b
SHA512 c8e654601181f279d89dadb1327c10972205b39a9432dc043a9c60b49267b13c67489154c8954210cb40ad0b3e429036bdeefe904f91bd076072b77a03887e65
MD5 SHA1 SHA512

Teknologiszir/cannabisses.ini

SHA256 9f5d3124effa6155fb2a7e48ef3133a4f3fd4c39deb4e208e228e71fda52feae
MD5 32670b2133144ed3518169a5d75af175
SHA1 3f15e944a0260a64c81fb800c5bb3e88f5490941
SHA512 89874351d7c663733bd97986ca14b5a2c1bbc928ce70c04698eaaa430ede573adbe4846ca2864cb5bf44467529bb11daa239ff2d325ddb278acd29676184f774
MD5 SHA1 SHA512

Teknologiszir/exoticist.san

SHA256 b9573118347a0f3e0f9c7b684da14b0feb3fc4ecbd6339e53242a63f68d93edd
MD5 5f0879b754f77ab7562bcf75d5d19f54
SHA1 f8d6f2f9e486bb180044294c079195654e53005e
SHA512 2115181c79232a2098c8687f23bfcf3ff026218383c98eea55705b636a3bfe1f1638556e72ce04d0821da42c0b8464527eed6c5bf83f64d9779126600f9e96de
SSDEEP 6144:SYnodTM8xCoR6Ht2mgT2m7rQZnhvxbFcWnqjCvz/UFX2MED4Ua50eaypXvxEdJa+:d
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/fiberfattig.txt

SHA256 add8ac8a2b20bce4fcf1c68d06359939a9850b74696d73ee822be7ab515f402d
MD5 a2729098ac38f911c6503397b58fae89
SHA1 094fe7c808eda30f211f832417817d09e3ff9dc9
SHA512 d35663b8c0b52d41910580bbb1c6b3e20ca3742e451d8c52c674e316606ffdd1113c02546a6118c12a4cbead41085d9a28414738028e432a8571e61e8c937afa
MD5 SHA1 SHA512

Teknologiszir/giffgaff.jpg

SHA256 604d67e737dbac56e537fc05c9e89fa74c4b65b6d64230f1ccb2b20ea6ec5472
MD5 8305578665117af7f1650bae17fa2466
SHA1 ab69b67dcda50fb208bc139ab818047a91a5539e
SHA512 b6a547fa6102c58ed167f819018ebbc40a91805c1132554e5afc0c2886035e83cc946bd5c80ac6c8960ca427c8a29beee03d36a2042732c66c66c583b76650d5
SSDEEP 96:RhpEPbENvjHzX48YX0nZ1C2evRPBErqBCCGxGWA82ITnm6m/G:LpB5bzX4IZw20BOq2o4Lmo
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/ilario.jpg

SHA256 98e6e5067cd1c96da26ac8d04327aa973b18ecdee4ba7d3006beb78a8b7b7c55
MD5 e6fa1f6aef297de2042c31fb241d9685
SHA1 e9012f5ec7ba94f9b57832b8db7697313b9194ce
SHA512 7cb6c74bf1a452655f373a18c335b5d32d21429bb8da5fff48c9035f0ec74a6bcf2cee96ef3954ff4d9c9de700080ceae9a4dc6dadfa6226dc3f622ac42755e3
SSDEEP 384:hT2k86lEB3aEes5Q0s0nWD4IdBBByT1N4Vc3+dlwbX:hT2k86kdxy0s0eyRuVc3+dKX
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/mummied.jpg

SHA256 1364d7ad0129468c5407b5b5f2cf5e43a3845b1a2bf5767dc968ae8cb72d5f76
MD5 fa8fa00dcdc2499310a915205430b421
SHA1 bdec2bf37e2f8b388261ee882528eb2bdd47efd0
SHA512 9c5743f901266cbb412935840af8d1ec17d423cdf45fbc4f46699d2a443971a78833e6db1b683e80e0ed1563df92f4192536b3b1f05253e7f2f0317f06820111
SSDEEP 1536:YFk0N3c60UfezENYqL+5R4Pp//IMHA564AIxo13:V0S60mkqa4V1HA564AMM3
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/substock.ini

SHA256 82ef593728ffae93abd221895a73312f307b76869746f6e11dd6f424cfaa8e20
MD5 b15e3368c3e43759164862b2b062c7ea
SHA1 dc2a85e0be8c12e9ed56cd89c86048d15671f4c2
SHA512 fbc37114adb7031034856be25edb5d8866aadf45c38e6b30ef82855df64db7888afb6c718b744eaa9a50661f85dddeb5516e9b56e611ad39625697998e4f8ccd
MD5 SHA1 SHA512

Teknologiszir/tankeflugterne.jpg

SHA256 ef1fe765e0b87126c7a99d62425e9dcd439a14f76b1a71afdcd5cc3ab473f2a2
MD5 7e8c0c9b7644be95783f76d009e593da
SHA1 0176c9b646af8057d763d31258e4134ec6c52ab5
SHA512 6023f914b7c5af9cf5c52c6b343fe031a6dea8a7c187cc842930c8db20219f4190935d876001b0aaa51ca69be1056dad42c752b60c67f790a411872eb0238fe2
SSDEEP 768:9Fta8ZZZv5d0iUtQHNDfqa5ToQaGkEUK3qFBP690sS1QbFiOObBaNUc/H:9aef5xCaZwE93qFBP6WbcFiHgNjP
MD5 SHA1 SHA512 SSDEEP

Teknologiszir/unclearing.txt

SHA256 2f35176f105b37fff5dbe731292f8576b888168c0a8fb080e9b4149c8ffb6822
MD5 4935031613fc0ab9c858f132bb58491d
SHA1 b5bc16a70e02dbaf47d7a69342cbe529b2d097c6
SHA512 379d239a85efe23c6762bf3ff82070391f43e4ada7f9f5079b25994baa5761650ff79b5bb012af978133382f08bb1c594b83711798dc794c896f8688267fe6db
MD5 SHA1 SHA512

Teknologiszir/unpeaceably.fri

SHA256 c809ab02594f2970d95a181c9b2b8403120a1f95183e4cb15224541ff4a9931d
MD5 b09664c53399867f6f42e30f199644ce
SHA1 428aecb9ce32de233a9fc4b9ba2baee668a84f29
SHA512 cc282465b27efb35c9b03bd45506cac2b14f39b6a253c298ff9db1dfadd75d410eb12a7d992330c836c5b01928673ff7bd60eef2ccf39f7b7fe6da92a290c1b2
SSDEEP 768:G5Vem9Ap8U8d7g44JgkJdzogGvuqx8+8au9ob5rQD1Os0+RvSxKFhyaoosSg5U9A:cO6tt
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer