13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32.exe

13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32
MD5 d631d6260412c0c7f49997ce4144152c
SHA1 a12b78e2c53c5be38d715d0b9bd96a6f3a68cd46
SHA512 2a31fecc4271b1a1b4cd53ebbbf9c46cb38629ad18cc8e13d1071737ef553d5e04854c542a60d73558ab2baea8751e814fadf2c16b84fcec416139bd76cb1321
SSDEEP 6144:Op+ggKWMNFaP6B0UXZfeu1s5NYjXnXydFIbZET/JMNV5zMqPUQHsarhv0xm:aBF3lXZ6NKXXydFItS/qf5IqsaVcxm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

b0:5e:0d:93:32:19:9e:3b:59:63:50:35:3b:40:51:60:68:63:63:9f:15:19:52:38:85:14:e5:fe:40:47:ad:5e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Berigtigendes,OU=Unlexicographical Rehearings Tylvterederne\ ,O=Berigtigendes,C=US

Chains

Dec 4, 2025

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10647

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Anstandsfuldest.Lis

SHA256 930c6c9c0e0deaf6898a68f949065cea55370a93810fd87fd469dd3e997c9d6d
MD5 850258ded3a8ad0c0debd3f9036e7061
SHA1 0ae8f6014ec7d3622ff4e74d2bf9dcd93b11febc
SHA512 a2d361fa609f913e7c2f5f1fabe3294511af7a7f61185028aea37082995f1a70a35c2d6a1b42fd9d56c525dfd10959e38282c5e32d1c75802604d6030681d9d0
SSDEEP 6144:j6dSwGO68Qv6toJ0J0Cv1cYCnEDCLx0fAzRhnsVxdokWl:j6dSL5BWRDCTzRhgdodl
MD5 SHA1 SHA512 SSDEEP

Contrapuntal/squatwise.alo

SHA256 2e41fab8d5c2643e72fa790340dd14be987e482792443f69cd8ae2c496fd2380
MD5 8c8d1b358d446fb01511876833300ec3
SHA1 7b2e29843bff4599d877663b2cb45f570ee397fa
SHA512 171eae8ab8c968c5a1ce383e1830d29e0dfc89e061c2e18ed2cf768d2d55ca854df3705bf4803ee9cbc392cb213319859ec1224b5cf97a2615e0e7bd44d36aee
SSDEEP 96:Zw1LwYsyFP/3Qm2b6TWv9IG3IRu7JDe9SvuASB4bu8qUj/M53PfFbFuJgt6pn9He:S1LwYLPWvWG3qB4bpX/M5/NtK9Dy
MD5 SHA1 SHA512 SSDEEP

Contrapuntal/tipsprmien.sub

SHA256 6d0ef355286611675e12744d21959cd6a03f13daba872474ea0921dbf3d592b8
MD5 966e410c757291387815512810301892
SHA1 b62879fc5d35a0406c9c76c7737ffa8811c40459
SHA512 cd813b964310d2e233cd2a48d670dfb359aeffddcc0db397097ded771d8d4cf57b98c00efc29a1a8a93b6cf72513d7dfa3831a718e6567c0a023657de5adb3d4
SSDEEP 48:xxKVH0L4u0cdmwTmqWuxbERMMsGWUQrlj4DLq5aeJNodlrp+g7gP55VCBvXt:xA+0MmwTmVuxbERnWU+lj4DTp+5CBvd
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Annakarin.ung

SHA256 74285ffc9fe1be7de0d6c70b9e2813875911582f3e5ee313553f0bead101cd69
MD5 0b1dea951aff13d00481b63dd3b513f2
SHA1 8038aab10c3f5fd23e6c10e08245d4eaced3525f
SHA512 3a5d0c7371190766361106c546df54246fbb426361b25ffe399d1e5b1df30720695feba3be5d3ea1e75a58c8f68a68f5bbdb2b7c72302d33763b4d303dfcfd4a
SSDEEP 48:7HrV3R5sOgTMWyXQJ8B9dZS92nWqtQ88GB7hWfM2tQcRKlOkdahJXhBJ:7Hr9Rq2WyAJ8RNnWYJ8GB7QMCisJXXJ
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Bestredne.mas

SHA256 9073cfeb81602b642c306309c2a8e6bd538b317e3bc66cea2090f9af053758ee
MD5 91e14192615fa2247708fe0ed70c01cd
SHA1 a61bbf9354509a2c65b0960798ccd697c4b17a67
SHA512 0db510500624ca1386e3d330fc519a9c5ac468ceb00c6adb257cd24336ca7dde6fdda0179612eea7f6e553d07c585aa487164e6c396edaf42ee1ff9ebb8d8e33
SSDEEP 48:gGi5frLxvfgc7ImfTCX+OuY6e5xH97QqYi2JUSwZO9xfhUs1yT3o+5k6U0frEBBm:Rixx7LfYXnzDq16BA/yJMI
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Esoterica204.gas

SHA256 6f06e0e43dab76d2694e715d67faaf679b65ad1277b883aa3383e061bb1eb286
MD5 ace494f81a52d3f912d847e602d47b71
SHA1 21f7abac3f2a2059f4dd7e220a2a7e38be2e4f2e
SHA512 adccd59e9beda9907b78c905bf21fd58a20ec2e4366fb21f1a109be2de5cfc94a991412bb4ba7e0baa32d1c9c5b428678e40cb2506367b08f8e9a001d3fc8258
SSDEEP 192:G9AsBmoel3nb1jN+TabARDWqP7fivy1G8aL10woGW3LvR8q6kSCEJu:WANV3xjN+GMRD52vNaw6LvP6kSZM
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Totemdyr171.qui

SHA256 4464a8f4c2cbb69dc2102227ad2da23b6e9b42fe154ce8c73c410f6b18272118
MD5 d8547c5f39921e74d739e14e6f1bd3b0
SHA1 d7aef7212ff345b13926f97bfe13dd9c0edb5a79
SHA512 3c58234f0f36625dfd67c6740a6f04c0ba7c0cf2727d6ebece4215ec58b9ac42e17a509a2a6377e5137039cfdd82d860986427b20abf68a55cb4a4719d5e44d2
SSDEEP 96:MS+pLmL57xXR91h6M7Bms7UwJgQVsj70EePmGA0dOIZVMeeVrMhNBXZOEjhvDJpx:MSFR9jHgsoAqMbP7VMeeSjB1hNt4Jef3
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Trinities155.fil

SHA256 f87cec8177fa884bc4212a9adce22bf182c37f789af475a3ff6f395f609e9c62
MD5 8d69646c52c153605b6711b9001d0988
SHA1 f291546cd9e2faf70cc965468c4a964ccd0f2e3c
SHA512 c3d7c5f4a2dac6336b5ad81e7292d141d8391e218209b38a13c2a251df24c23892dcfce1c345f9ebb201a69b37744fb2cd48a5211049e466d6332d5b49b68c99
SSDEEP 192:dQgs9BapAqx18MWZ709rKJrQzzE7ZMIYe26b3DIWDYccF0F5IvA2BoBIMS40w5S:d5SapAAs27ZI2g3DFcF4ccS
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Udskibes39.log

SHA256 e94b4b3a7a9a8e40ad4d7e3c0b9572cb660f848ff33cf981e1fdc67ff5201dfb
MD5 2a32bedcad1f6a544834f4a3b902567b
SHA1 561d0dc7eaeff7fb0df820ebf8da841e869dcc07
SHA512 8865df2cf5af385a0c549a0a8b0249792e1aa483c0ca5de08e229d740b775cac9d50b424a80d10ab171530203aa1aa9003686aba65cfc3db0bb01da2c6972487
SSDEEP 192:BI84zHKf7lWAdbMbTgtN/Jso8dkKgc9lY8rW2edG7IzRLSygGn3y:jD2o8dZlhbeVzwJ
MD5 SHA1 SHA512 SSDEEP

Frdigstber/Unilateraler151.for

SHA256 bcb99bacd1f134029c83b895819cbea3b7da06fb68951b3b996559cc14d04b20
MD5 7b17553878868e7f92368e22765fc2c4
SHA1 52a5dd6c955b9c13aec7e6a20ec6d24ba7501603
SHA512 cc059b83b5747a552356d85c26c58958a39a75d3d2fee7efdb0f9a990b468ac7f45cf784ec1cacffefbfa5484b898e34a01454483e59bf818c0c5cd6e8c42be8
SSDEEP 96:QXvYLuWyaRvOwWJsmujEHkusGyJzpDAwAwmPkPVjqmu34TfyIqHwL2TYLXkG7OZZ:QfYLukvOJUjpdDhlmsFbo4+IqYX/Z0
MD5 SHA1 SHA512 SSDEEP

Frdigstber/chamaephyte.vex

SHA256 2c4681ee93e39cda36f2bba1af25364817d0153f17724ac7ec727a19274cba48
MD5 af220ed1008c1e7203fba94a844a0149
SHA1 c7818c775e4516bed5e39698615f47f8d956757f
SHA512 223322aea1832b6f42515cf0ca508e1386c6ba2e21920c82566b87714d55d861bdec48adcb0058af57a38a67d97f428e73e2b359ce8cbb95e9465f33c1efc3f3
SSDEEP 192:EkarwZf/LGBGfEeiDWS8UDoXbOiHLpaHzljwekTDDBERe2CrLLRfocXQzL12:EtSUkib8sobTrpaHGekXdrX2L12
MD5 SHA1 SHA512 SSDEEP

Frdigstber/enrolls.spi

SHA256 c2dc0d4d71bb19346e4242ed5ad51b8e0f6a9f136c2da77b5bcde7cd87ed60aa
MD5 e6974828af9fc0799c72e15cdc4d44fc
SHA1 843f15375dd3550883bbb8b5746cb9526e140bdb
SHA512 f366b22174a2c39e838eed318032ff9fa7ce26185143ab1fa0d418465848151969cdf06b989703944e7eedb10b0d1372336a530a79c12ede4257d823d2293aae
SSDEEP 768:zD50H+GDEypek1VfVCzRQNKP97utZIz3i+r1:L5zr1
MD5 SHA1 SHA512 SSDEEP

Frdigstber/massemedium.afs

SHA256 ab0222e000d293135eaeeb2abe556096801daf01056be38cdaac29727688bff7
MD5 ccea35751259f6042788575877b3c1d6
SHA1 53d1d500b2e3cdf9196c1d3eba86490246791138
SHA512 7d79aa73f7e104412c43ee7696e463675d6f6ed7dd4d9cd1a0dd892e827e96d4a68d51dbd642e562939c9b3df6aa2b3e75e7ea7b45fc1573e26125705f02d36a
SSDEEP 96:9IgAAUnB8VX995eDkCHezkDaNXM7OH17qhXE+23W2GGrVSnbIEVzRo7eze8Hgoml:mBkCHYXNM7OV2ubfml1RoKFd/LS1TDu2
MD5 SHA1 SHA512 SSDEEP

Frdigstber/micropterygoidea.alk

SHA256 72c5ee0ed1133de7e0dc1e46bc173c4e29e712a4ac08a4a4819f573bc1550079
MD5 c1316aacfd091c823f21278066fd4c01
SHA1 7e4081c525da0e8045d3c343e9235d05dbd68115
SHA512 a9ced2e27dfe50ca7de774d12802258aab787cff65d6285640c3cd5cf6f70c4e2203eafe63f12fc121562655436a6fa491275fc945c7e975b3f859fc90e46219
SSDEEP 96:f3c4U/Cd85w32hVy8kcJw8DMGKPUFWuWQu4fvqIVuHsUYLdnl/b+RbmlD6nubKLL:7MCd8SxY3DI1nIVDLj/6URb3Xql
MD5 SHA1 SHA512 SSDEEP

Frdigstber/nykolonialismens.det

SHA256 33842df5a8ab8e0573ef4b23f780309b58352f4ee04df4408879244003374bd2
MD5 d5fd7217bc27985dba699e59bf6d89c4
SHA1 b456babd72d3bb99113b01a4e3b515bd5aa9e466
SHA512 e7d02ddad8e56399905ea2c67a9f33f40c9ebfb6e4230b1df0a195f0affb9c71705bf433a0b8f1cd189356564098eb759852d247941b1900ee6ed54cf85d06cd
SSDEEP 96:1cos/DdrI69+oAWU94XbqL2llcyMDeTgUdJXOE:CT/D6ZoAWUeLfceh
MD5 SHA1 SHA512 SSDEEP

Frdigstber/obsternasigt.dek

SHA256 2a487716aba1d5cd891c3b701c2601480b9880677d00a3a11bbc23d879a4d4c2
MD5 689f0c5667d20ea5ce41ce0efebfd5cf
SHA1 6087261090052a696769b286b0f50d7cfa73a4c2
SHA512 3aae37f66987ed7ae6972a2453d7de5990b61f82d4c25342d62976c936ec047830a9a7ef524f2968909293c40265b356d09275489f3a48ad54ba3586770c6417
SSDEEP 96:8L0d2Yj5B+k6fhmwpZpG+Sxsb8hjzzw4n6XaXMogK7wgOx5j19XDmxfCt5Elr:8+MREYTz/mJr
MD5 SHA1 SHA512 SSDEEP

Frdigstber/rationaliseringsgevinst.out

SHA256 87a135e63d2a02c54eedb175a71b878ad7ac1baca9958871acb21b015c163ffd
MD5 c4c30ddf4fc5414c15afcfdd049da28a
SHA1 2db4d898bfbe2caaaf2b8c26a37fde16b7a8d2e9
SHA512 ed18aacaee448d1ce9357676ce639105d69b3b513e3abf97627a82a6b3b1070f74889c50c7cea07638e0c3e3f3531065fb0e2f724ef69cab2daa44d9ce3200c5
SSDEEP 96:twwepupKg9JI+UDASRSFJLDoo7XvkifYhm12ouEscR6OblaqYJvJBl2wX/xeubd6:JMVZV0/7ko3s4+qYXBl94WncXxT
MD5 SHA1 SHA512 SSDEEP

13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Anstandsfuldest.Lis

Contrapuntal/squatwise.alo

Contrapuntal/tipsprmien.sub

Frdigstber/Annakarin.ung

Frdigstber/Bestredne.mas

Frdigstber/Esoterica204.gas

Frdigstber/Totemdyr171.qui

Frdigstber/Trinities155.fil

Frdigstber/Udskibes39.log

Frdigstber/Unilateraler151.for

Frdigstber/chamaephyte.vex

Frdigstber/enrolls.spi

Frdigstber/massemedium.afs

Frdigstber/micropterygoidea.alk

Frdigstber/nykolonialismens.det

Frdigstber/obsternasigt.dek

Frdigstber/rationaliseringsgevinst.out

Sharing

General

Malware Config

Signatures

File Explorer

13410b80418e08044df11f8ad92e0a2380acbfe2c2b5d649fbd9c4266e3eec32.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Anstandsfuldest.Lis

Contrapuntal/squatwise.alo

Contrapuntal/tipsprmien.sub

Frdigstber/Annakarin.ung

Frdigstber/Bestredne.mas

Frdigstber/Esoterica204.gas

Frdigstber/Totemdyr171.qui

Frdigstber/Trinities155.fil

Frdigstber/Udskibes39.log

Frdigstber/Unilateraler151.for

Frdigstber/chamaephyte.vex

Frdigstber/enrolls.spi

Frdigstber/massemedium.afs

Frdigstber/micropterygoidea.alk

Frdigstber/nykolonialismens.det

Frdigstber/obsternasigt.dek

Frdigstber/rationaliseringsgevinst.out