cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c.exe

cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c
MD5 f4684385ea3e4e64a8ea88449d5d09c7
SHA1 6b48ca9b415e0c8fc1d7d75508d4164901485f5e
SHA512 f64921585a43f298859a65eae4e156954687c74922cb27ed12952cfdbf8a08b8cfce74fca3026e43864f504a0a956f0920f2606306ad61e91c1b4e428a632fb2
SSDEEP 6144:cIw3kYdpjYtzUh74epAZWkF0bu06YiE2dr2DCqEATdvEsSgUG+Qdgd9SAIbOXWhk:NYdpU9Ut4TZW00bj6YirmfEXj+gjFIbq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

2a:bd:c5:5e:80:44:e3:fa:5e:98:64:0c:5d:11:f0:7b:40:83:b0:4b:cf:8c:33:c1:52:d6:85:ac:d7:00:ca:9e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Opdrttet,OU=Dahlsten Weissite Explicatively\ ,O=Opdrttet,L=Grainhow,ST=Scotland,C=GB

Chains

Oct 9, 2025

PE Signature issue

Digest

43:b8:ac:53:2a:dc:cf:9d:1c:99:2a:2a:eb:54:ea:d1:e5:77:2d:ed

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Opdrttet,OU=Dahlsten Weissite Explicatively\ ,O=Opdrttet,L=Grainhow,ST=Scotland,C=GB

Chains

Oct 9, 2025

Minor OS version

0

Major OS version

4

Entry point

13449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
MD5 9625d5b1754bc4ff29281d415d27a0fd
SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Blinkingly.Duo

SHA256 4bf6e835e13486ae68e9d22fe04a0f2196f6778c39ab688eb6e8cbaebdf14063
MD5 804c40d3f19bc6e344ccceaf3d4bfb44
SHA1 5b45a177248a05a4adaee0bd5bd4b5007f87d421
SHA512 07588591674cb36d1a636cf4cbed0013fa7bb0a9368b1158765925b70628191f5eddd0500eea395637fdc2940b30e5781318cb5efc645617364fba71dc6fd231
SSDEEP 384:d8/deZFSGjJsYYD0rCMWQR93g3UVIwsfhJpeRgl8kw:d6dgSEBXWQwUVIwsZJpeSe
MD5 SHA1 SHA512 SSDEEP

Diplasion.sku

SHA256 54d4b3b7eef2aa547a436d8a8dc5b1555241a06a379cbd0cde3d889a37e5efe7
MD5 da628a8c7d7ed5421595c7a75ccc2386
SHA1 60b10a1a126b845632ce958c4a90fb6b0e116c89
SHA512 9d54cd04ba0ac3a70cbb63bf075743b0e467ae11da638a9559bb4d7eecb5a18648a03a50a59eb4e0511c3529810b6d87acba611793b343cf9998d02ce38ca52f
SSDEEP 48:BsKjKW5kwj8y0o1esGRWNOTSsW1iL9abXeREE8TOBR2YTM8K3:4bo0o2aaLotE8wnTm
MD5 SHA1 SHA512 SSDEEP

Manurage.for

SHA256 581c64b05555ddebf3039cbf1523e174dc75b504445eb640ec44b876b3930d24
MD5 35a246ab015bf4420eadec7f1a11e377
SHA1 fb8d02f08d314f79d83494c07836bd5ac2a1b622
SHA512 da7ffd984cbf9f92cfb33efc40245c35853a7c593f22963e04357663e5fd6f44794c18bfcefdf8e1c22c68b82b49ddec5502acf9e6c1f9633274efe3a4036e76
SSDEEP 24:xZbcN8dLoOsRrHyBa84T2WMcDag4mJk+R9WcZ5URzdGuOQiuMPJAsZR0VvRoA:xZdoOuDyBa8Brg4kkHcUOA2Or
MD5 SHA1 SHA512 SSDEEP

Overmajority.Cat

SHA256 ffbd56f220ea16c2a07a3576fbbbb390cb5b8fc11fcbf3a1a6d561c24cf6cbec
MD5 1001f6899424dbffce1f94b464f0a58f
SHA1 35de062252f4bbd245817ed84d0bad697d0671f9
SHA512 a4cf7e752a0bfd8d8fac7310debad44c043e2028a94426ae1735b3d00bafe4474380a633a2eab69641c41be059ccffdffec14e825aba5366bb923dd0892901b0
SSDEEP 6144:7HDGraJ8SexNtiml9CmZbTM0ZnRrSmNkMGqOQEQHFL9EF1AC8Zw3:TDGrgexmmddTM0ZnhDX6Fz8Zq
MD5 SHA1 SHA512 SSDEEP

alack.kns

SHA256 2b6e9789522e7836eaf2d3a80c7a60d2f0dafa745ff1b8eb0f889fdd8664c652
MD5 7100cead5a76de2a5764e7cd4da168dd
SHA1 f70c6ba80b7a1704a317f224299e1dd796b1bfdf
SHA512 33382f5fbde1494469b54a74bbea24d217d14b99447f36f7cec45231e958c19465a5a1302b74ee884e82550d30ef9826bf933e256e5bebb81fe615674845aa5d
SSDEEP 48:atxPfbGZzDh0UJp2XHzVGBG6rO4nrs1MqLiqFhXFM:avSzDhzJyhN6rNnrs1GqFhXFM
MD5 SHA1 SHA512 SSDEEP

monimostylic.hos

SHA256 b8a22e3a02031c7f747737717cba2c0800ee1b644a9bc4f45374eb8fc875c34e
MD5 797fd04652b8b3d8a20edfb3308ba03e
SHA1 0bd1dd712c9fdf8aaa5175e8a3be8c708ae73f56
SHA512 0c0c43e9e75236d688e35093759385287d9354150bb79e8e1ddc96ae47c141fcca9d054edc6f258e623b9c49a57ac789345a31f492771967db6e3b7e997565a2
SSDEEP 48:jOYr2Tbpgl7eL4mndpvtlaV+6BokgkVoF1MIAEw5H1VbKWOV7whSxp9:P2Xpg4LtX6Bo/zMIAEIH1BKWO4SJ
MD5 SHA1 SHA512 SSDEEP

cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Blinkingly.Duo

Diplasion.sku

Manurage.for

Overmajority.Cat

alack.kns

monimostylic.hos

Sharing

General

Malware Config

Signatures

File Explorer

cbbfd15208f4d0765ec912b33ca8d21559a7ad3f5e3ba9652dea8973c410715c.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Blinkingly.Duo

Diplasion.sku

Manurage.for

Overmajority.Cat

alack.kns

monimostylic.hos