scan[.]exe | Triage™

resource
unpack001/$PLUGINSDIR/System.dll

resource
scan.exe

scan.exe

IMPHASH 3f91aceea750f765ef2ba5d9988e6a00
SHA256 62ea4446b44f3afbe6cc5dcf473d25527e03f7e31a14dc4078f0224fecabf0f5
MD5 c1e9592d23d5ff17a26ef804fa8fa7bd
SHA1 2940b55a0a5dd544a16f9749952114dcdc0a4c3c
SHA512 a7d0411dafc46bb8918303b1f9d20215924c36c10e9c5f633a442a718ef10b45ac240f6f74b9ceea4818a6e0f6297e8c14fcfbda46a3bfa3c5e8d4e36dc35a2c
SSDEEP 12288:5Rfu8gWXmW+qhk7KOOSW8T2T6hOC2FUrsIM253:rfu3Wfhk7KVStz33
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

PE Signature issue

Digest

3f:15:e3:9e:1e:eb:c1:be:d2:6f:e9:c7:32:31:6d:45:c1:65:20:88:3b:56:d0:df:48:dc:61:0a:77:5f:83:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=pelsede,OU=Koggerets Submeeting\ ,O=pelsede,C=DE

Chains

Dec 4, 2025

Minor OS version

1

Major OS version

5

Entry point

14039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateFileW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess CreateProcessW GetTempPathW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetErrorMode

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Diagonallsningers/methodologically.pho

SHA256 82a7f982b1d078ddcb9bf43cb84c06029bbcc8e4250f610506b0ddad27432e8e
MD5 752226976f5e1957fef4d69d423e5f23
SHA1 340c7bef190cfeeb430f15968d0eb095e05dd7cb
SHA512 559aeb59e7d050a8dc4291d17c2943c242806d670e9c45456f9a72291972b1fa80ed955bd6da75d126ac1f27be07faed924ea08022ca8a3afe0c409b6d1d8756
SSDEEP 192:EMWz0JOkBGkcQaylWkJhWKj6UEPkyqrdmOnUSE3v+yUL4:80JOKaArPWrkyc+vZUL4
MD5 SHA1 SHA512 SSDEEP

Diagonallsningers/skrubtudsernes.tra

SHA256 7ebfea2aa4bb7cffc518e99cb55ddd9d376e2763b16ea4d31cf77eee487ad5ef
MD5 ae155a8dd3092eb5e1e240014afac860
SHA1 d4b5f59651292c257cd08f05e58e18f9519ae5f8
SHA512 a380aea1c893c079a08667502df2f0666304408d12e470ad1a59c5c78fca9142bd9e637e6e98c730a5efb80a599231ad9261af2b63f438580849d4ee2e659c2e
SSDEEP 96:380rgs0bvu/NK7eXXHYFPJSUY/Z1zT/7YQp:sygs0bvu/w7enHIPAUY//zb0Qp
MD5 SHA1 SHA512 SSDEEP

Diagonallsningers/svalebajerens.uar

SHA256 7fccde16087472542a411b00acc850dbc8eda04798f988e7434db7ea8db3f268
MD5 1585405ebcfff17c345b6815ce2a7843
SHA1 c950972f8cf1d43954138478f4128083e744129b
SHA512 fc8d081978653d65599e824a4db483174c58eab61161647d016ec42cdf76aa9e657c93162e4c21c9655acebc18a35606e83f610e530639cc2274307fcfe20aa1
SSDEEP 24:giuuIc+bPHq+yMzW5X2BA5Ixbgk4ymDkBBeGk6+kG:BcPUB5GBA58kkOt96+j
MD5 SHA1 SHA512 SSDEEP

Diagonallsningers/taskekrabbernes.bim

SHA256 331957030bec71414db975a3b826a9513cb07eb6d59ac87fd2ba96aee4bfe28c
MD5 cad06ed3a633d2d9377576917e4b32b0
SHA1 71dab475e4570acdbacebb0512d4036498e3cf07
SHA512 2ab295ae8a976e89697c668eb139e9d344ec0451aa3789b850bb73f806ff6066d30c1a5cd2f6d3be9e17739b591840be00fa47ba5d584034f1a98eeadcf2af7c
SSDEEP 96:wFQObY8EsBZGRFccxgvAkzk+mIvicjVO5QmEpE31a/Hd:wyObYlsBZGRFcQ8kkvicBVBpE3kF
MD5 SHA1 SHA512 SSDEEP

Diagonallsningers/tkker.sem

SHA256 8deed51c13183f688076c75c447f31661f847a07b90e637e6102d42f00844cf8
MD5 5e1048cf1005ca530ace67e337e88a84
SHA1 1b9b28c0bc94cb85069eecacc4317a10c89a8a1e
SHA512 d1f99517e85f5d2c683514603efe22ddd44073b210f3c0ec723823b6bdc19327171db256471a1f7c2dfe99979338e4b8257d660f2563447c03b84a2c98268fb7
SSDEEP 96:ziIpCgX4CaMXwW9dLJbgFGLz5dX4Hv8gc0iGG3q+BJBJosh8LbuhBtiyH:Fpak3/sFGLT2v27tQavvH
MD5 SHA1 SHA512 SSDEEP

Diagonallsningers/tobaksaske.due

SHA256 971c99ef2a705ba4bd8e975e6e1cc24ab3f71496c176ace1132775d88438cd97
MD5 246cd944f338abe7b0ae2f29a1a9f4ca
SHA1 ef7246bb07cdb0e25a58d6f40eeedd26a4495f8b
SHA512 f51211b962f3711112d8deb425d6a1f775029a2b49c14347176469504b24b82ba4f45a7913c8391e4ef565492c2f94f6841388c62e89d3b7bb4385ba0ec3db41
SSDEEP 24:kXEk8LzYv2+cEMolE/ICuvH6u0TqYZvLzcAa52I7Jv:kgM5MolE/ICuvaVTqYZv/S2av
MD5 SHA1 SHA512 SSDEEP

Jardini/Mntvaskeriet.afl

SHA256 829e01f59e703b165d40f91e6005fa602d0bc088df4d6965dc421d615c796d2f
MD5 25a364f81bc2abf423e5a0ec00bbc8cd
SHA1 5b769d6abf50710a23800f9e7624b3d2b7a3b2d8
SHA512 596a8f8cd3b11b8385df22954b9a43092f6708f40fa717764e93e44dff48d109e7dad6b1778a2f17d1d542e087e85d6965e77e972d5eacf22ed6bc309c0da74c
SSDEEP 96:zVTjBayjS55ic7xwavwPn8gaaBmZyfEfTg8ZGc1DIUm97a0XR9htaa4qV:CVySAjS8oqvaa4qV
MD5 SHA1 SHA512 SSDEEP

Jardini/Tehseeldar.dis

SHA256 e2fffaed60f70cdced332a3c48216ffffa174433bedf48ee0804db3c4809a184
MD5 ab7a39138314c48c5655b7982b8c7230
SHA1 d797e3bd9b139df71c77e385611bbaa77bfd2b30
SHA512 a6d019f9a0f5f2fbe4eae250cffb61720a57f9f19eb325f37bc2e80c7eb0ba123b4f6c2abfc39b874649ac7cd03a50db0ac8f8476fc8e99fb7465f3c32ac644a
SSDEEP 48:Urmh3/5TYwZFIObTmetvEgsIBTwRhJklBKDzwckbQi72goegRcv0mA1daimP5USP:LjzPj/sn8Aock0i7icvIdaBySThCpUQC
MD5 SHA1 SHA512 SSDEEP

Jardini/Unacquaintance.hot

SHA256 cc85ad6d5b6b5993ec0e299086e79569ab0d7f479b57641e39eb9dc34aebe912
MD5 1cfe05c0789d906273eea257ba53cd35
SHA1 126fb4d1474c567de5ad764db1f05f16506d9a9b
SHA512 758f25ab045b333ef406237e29ad9a316e19f527d239efc7a6db5875f30c56c9adf4ba46ca8fd43b7f1cb118946036ee879b28998334605d8ae93b68b94d6f99
SSDEEP 96:pXmB0Fop1s5QGhJj6cX3T8BTRiSZ1sCaAYX:AB0gsn3X3T8BdiSgS4
MD5 SHA1 SHA512 SSDEEP

Jardini/adfrdsmnstret.eje

SHA256 03e14a1d4d1278dcba9aed71bd871d321f86eddecb01861819ec0a22781add72
MD5 82410abd290f15059d6b9e5aae93f4fb
SHA1 f82a009fb5d55aed9d68d706f7fc80bbbec1f2f5
SHA512 c178d290b874bf3e848c24de8d1907fdff8fa963cba0c1b4d2c72a6e33d2c4ee6ac3655b441f968fda754b8ed68bdc68f45a468cb3421fc43de6219f89e39c31
SSDEEP 48:/2Wd7KLRmdNlam2mwk/jVdKgLeBzRDbBgbUfY/qMLme0XuQvObKXgPokOD8:/nQO5Ck/agLeB6BIe0+xKco7D8
MD5 SHA1 SHA512 SSDEEP

Reernes/Barberen.che

SHA256 8fbd215d93640ee7614947d8920948658f23b02b4e9660d2493cd736766589cd
MD5 25ef05fca959dda5eeac0c217b98ef33
SHA1 ed8653da68fdf8dfb8d05677f10b584fb9d07c64
SHA512 01b6f0a9440e532c64e6d37d36182b883ffddc0ef15b8a652177e3b5b2accda45f8b7e600a80361635f650f601d441454a9c248c8e7d0def7aeb3b210dd6ca9f
SSDEEP 96:S7iNnyycss1mCdROB8qSMxvVb3WCaituISTKg9RgPvzH5uWxD5/bLiFIjgAREo:S7aIHh62qNxvVb3WRFWsU8QD5/ywgTo
MD5 SHA1 SHA512 SSDEEP

Reernes/staalstberiers.fro

SHA256 9263cef9e8c16af80044231efbddf28021459c2d1cf810fdf7a2bec16a5e313b
MD5 cbdff40aa8681fd597e849aa7d249705
SHA1 cdfaffce1f9a3a3cf2d8ea215e8d0d48384f4530
SHA512 d4deaa332e5c226ee103824429c7c3dff8a6574716c0e5f34241c0c1fe467d95523e73e81c61eb5fa838e0c49d15db69b25aecae021334b34e77be116984b904
SSDEEP 1536:k2D4+5doNB2+E53+k2/B4yI2ohUA5pxfRwt48KJQ:k0wD+3FEBWJ7JwvgQ
MD5 SHA1 SHA512 SSDEEP

Uprose48/adoptivmor.tip

SHA256 166d007a829aa1d7bdc50878fc15f79db44a003edd6ff7ebb0bf4b2c7320b2aa
MD5 c0005f5efc35b6f2aa990165aa2127dc
SHA1 917da57b66fd772d221d4c738744446507aaf776
SHA512 3de4317cecd8c1cdb854df19c7d0da6770aef1b616edc064813d40a3e9e603301b4e9badc5526e142855312fb54e2497046cbeeb8d8659a7081a867de22179ea
SSDEEP 384:untHht4TKOVWWEZZVgkt0+tqsweKEuaJVVTIWO1O0MTFyV:untHhtR0WWgZV/0nxeKVavV0WO1am
MD5 SHA1 SHA512 SSDEEP

Uprose48/glycaemia.gaz

SHA256 5648013fc1d9b4327541c409d677cb7261b5b17ca01aad4b146ae27e51710156
MD5 6cf201a9894fc1aca984c5b6074af4c7
SHA1 6a78b1351566ab03f89c5d9fa92873255a081f4b
SHA512 77f08eca29814336e1b4b87c079dc1b9982ed3154e7d677565a1b4666558f23e1c03bb738080a3411c23363940e972ea7b30d5ecff6afc0da0bffe719b0842ed
SSDEEP 48:72mAK7rgvW21rZb5skUQB3vbySKySGlMj50nUQHjOyo:amZrYW6rZb5rf3TxhSGCV0UQiyo
MD5 SHA1 SHA512 SSDEEP

Uprose48/madreporacean.sug

SHA256 83a178852d5f3254592fa440402d95426e8112a0d2fca2099aed82a99fc136f5
MD5 203598fa06abeb53dcee211dfd076a3b
SHA1 cd1bbac8a9e7efc5371bf328a14da8cef4c8aec6
SHA512 4c05caf30b9ca1b8a973832bfe897084ad4a61b07e890fae6f17902578d37d430ee7a07599bd6df06d5e4d3a5316430d64cfc4374d93576445adb8f6e5b8d5b6
SSDEEP 96:TvJDgU77m8AYmJTq/Nwjwe2cj49jJKYbjfe+z2RR75x+Sm513TpqOC8X:DJDgU77kYmtY1Kublz2rVxj81jQOC8X
MD5 SHA1 SHA512 SSDEEP

Varv.Spk19

SHA256 12fbc85c0473952409a1e11e3d3825263c3deca3e26d19c911584f3786186775
MD5 b6cb71c6d661c1e7f5d58dd4cea4c204
SHA1 92fbec6ab0197cfc3cb60205590ade05af0ea8f9
SHA512 6f5a48b8fb85d384100b22b4ecd329b3a1253015bc8f4772db618c55b614e55a5a2ffb849e8c00314dc68a9936d7cc543df0cc7e6fdd6a51039de5d863f32e27
SSDEEP 6144:P02dSwL/hRmAU+iuGRPQ9mxlWd1X/3oHmnMKOTq:P02z7qwwYCg4Tq
MD5 SHA1 SHA512 SSDEEP

scan.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Diagonallsningers/methodologically.pho

Diagonallsningers/skrubtudsernes.tra

Diagonallsningers/svalebajerens.uar

Diagonallsningers/taskekrabbernes.bim

Diagonallsningers/tkker.sem

Diagonallsningers/tobaksaske.due

Jardini/Mntvaskeriet.afl

Jardini/Tehseeldar.dis

Jardini/Unacquaintance.hot

Jardini/adfrdsmnstret.eje

Reernes/Barberen.che

Reernes/staalstberiers.fro

Uprose48/adoptivmor.tip

Uprose48/glycaemia.gaz

Uprose48/madreporacean.sug

Varv.Spk19

Sharing

General

Malware Config

Signatures

File Explorer

scan.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Diagonallsningers/methodologically.pho

Diagonallsningers/skrubtudsernes.tra

Diagonallsningers/svalebajerens.uar

Diagonallsningers/taskekrabbernes.bim

Diagonallsningers/tkker.sem

Diagonallsningers/tobaksaske.due

Jardini/Mntvaskeriet.afl

Jardini/Tehseeldar.dis

Jardini/Unacquaintance.hot

Jardini/adfrdsmnstret.eje

Reernes/Barberen.che

Reernes/staalstberiers.fro

Uprose48/adoptivmor.tip

Uprose48/glycaemia.gaz

Uprose48/madreporacean.sug

Varv.Spk19