Sales Order Invoice Reconfirm bank details[.]exe

resource
Sales Order Invoice Reconfirm bank details.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

Sales Order Invoice Reconfirm bank details.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 49c7caba0e93c51ed5fb1f246fc884b944d95a5ee19a3c7e9bbb43f7eed5255d
MD5 2b6a04fe17efacaac9cef9f251590d77
SHA1 80f276e9d632a38c8f95788c9d36bbfcb0134abf
SHA512 cf645c2f08dcc1e0471d7a3d65100ede428f15fb4fafd3694bba5bcc185fae4797702a05736c18061974cb2321f21dcfb1a578a7c60304989aad2af61198a560
SSDEEP 24576:mHO/MdQiqo48IIqWdBz6kqd43jbz1HVkMIwSqLbBYNGA:mHO/ueIqWdBGzKb0wSqp9A
TLSH
T1CA1512605752944EE0530874ACE23776E7D8AE6637AEC38277C0B59C7D2B75A4F283C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13117

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
MD5 9625d5b1754bc4ff29281d415d27a0fd
SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
TLSH
T1BD325D06235081F3E1914138846B3E175F6A15069BF58E97DFD38646BE30BE7BD79503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH e2ee55bddad4241d619d6a8a38e2d869
SHA256 86c8ee210e6611383a634dcb8c60455063ddae3d7adccbeacf3adf7bf2a46676
MD5 d2e45dd852a659e11897df573832f381
SHA1 19990ee627c95b6c18d3b5c5f0ec5c24791d0af5
SHA512 93c9fa1767f3e861fe5765f2940aaba9eee6396d069c443ac6cbaccc88441b2bfc3c3af50a8044161f96bb7eb81af1bc6c1fa754d89740d0a2a8d591fef11073
SSDEEP 192:o18cSzvTyl4tgi8pPjQM0PuAg0YNyfIFtSP:8BSzm+t18pZ0WAg0RfIFg
TLSH
T1A612F793E5E420B3C6D3523F35BE2B2EC7BD5335B0512C0482738A497A6947A6E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Beskftigelsesudsigt.for

SHA256 c1ff1af03e14588ce47183bffb715e2127ca79adbaabf6a25d4d88f393324ab1
MD5 9fa1a8586ee472f92000a36b0961082a
SHA1 98e353429c8b25e702537d9e78cba2cff7d16e3f
SHA512 05b261f88a6730fb8efa5c49bb64de5f7946784fc4b5a1178e6fb327170c948c006aa29f80bebe48663d0068633b1214b1dc60205d6f807a3732838792603bb8
SSDEEP 96:doMoKw3z9ajBlrzSyoUMF1mfrRlqw9N7J66Gk:uMDw3WBlrzCHiZ77g6Gk
TLSH
T1B8833AE6BEAAC7CE561D035AE4224B524C15331E3B49E67AB47510A0339986E794E83C
MD5 SHA1 SHA512 SSDEEP TLSH

Celosias.kol

SHA256 bee08f609d7bba488de5d4ac85d5829f440e200277ec754e75ac091542aaff66
MD5 e0c108648b44070fe3ad778d49619965
SHA1 98f54de379599120fa6ddf3e28a153e0952f8950
SHA512 fd2738e39f6b3af249e432d427de8ebfcc71dafa7b7f15e10c9160ef386c2ce314dcaeefbace1560d451826feb85115efc9d308f6243edef9064943b965800a4
SSDEEP 768:E4CrSRBAC6TMFw2qCiwPkTA+7fFsu31EkDKjrqj9KTZjjU/d3:E4PBSYIt2kTA+aC1FDKjrqeAd3
TLSH
T13794D0A9BCF97D6C86148C7739D9B78D0C50146030C68F81ED54FE9A0EFA4389056DD3
MD5 SHA1 SHA512 SSDEEP TLSH

Continuers.sne

SHA256 751cf5646a1073a6fc0f9c27162d8646de6eae55f3d3e291cc67938ece945987
MD5 aeebb776e8add3deb4e667d1673d3754
SHA1 ea1228d49010401a7f7cb89920ced82ee8fdd4f6
SHA512 3d6700f6cbef45f61c78643adaf7aa39ea3ac8e88c315850cddb74ddc6a44eb4a52d563e93b5c47a320ed8a66b6c2ac44b3ec39bd6391a681bace2b2b39a82ae
SSDEEP 192:T665cw+VGUrxWpcauPSgy47yo7j2Lwm9K8XXEQt47nhyhITiBwNWbIFXaupYhcni:TpC4bqhB7yACJK8djqeWdHYSLDHI
TLSH
T1B184CF440AEB6F88C29655999CBB70A68D5908FBDCE06B06CF3585D80156F99C093AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Craniums.txt

SHA256 1bdc89798304565ea4d84971e75767ec376f78a517fed632bf3c738e1e65dc5f
MD5 c5a6e5ce71965c2937bb7e01af2b9c5f
SHA1 e595712abeeeef35d29c47476114e835aded8f50
SHA512 d63904ef05307104dd21ef217490266f0aaf3e5910f74c3403cb274ce6e0c9d4fcb1ed9ff433e6ed46a928f55c8e74d92b8bc089b992910cc0823bc7dcbb5ad7
TLSH
T104F020129A2933E05E1253433511D352A54D12AB143A0021AD92554E800BD26D66CAB9
MD5 SHA1 SHA512 TLSH

Dolktids.Ben

SHA256 d3dcbfa6db8e6b1f52cb1299e36ab7c01a0d3f285725874c66e4cffebde91b4e
MD5 96c8efa6f1cf9b5394a017bdd37418dc
SHA1 66e1f1a45071a5047d5897853d2e0301d0ca2ccd
SHA512 2605fc55d41625911aa413437ced45b1d72f46b8a3c44faf1cb12d5f9a471d503bffb2b24a0657d1e50860f444c035eedc40004d2d055f75c30c692d164e0001
SSDEEP 1536:jx5KWOCb1U4Z1bWFzfHca9rDXWPwKnvmQPMukR+9BJ5VgYEYGzkUf5sjC:jxPG4uFLXsXOQEuki5i0YkUf5sm
TLSH
T173D3BF66DB568CFBDC0AC43CC45E72954C64B0165B0FD87E7235A819C2872E367386BB
MD5 SHA1 SHA512 SSDEEP TLSH

Fremtrdelsesformerne.ind

SHA256 157c7e8e6947c423dcb85c9440c72245c585c3a7cad812a2004a3758acc49834
MD5 2127a92cd436e99566e910b44789e334
SHA1 5cbe6e77c61aaedc03a88e06082e4f259c013c79
SHA512 483dd7a602d4aeb5a516d9645d3518352b1e7f0ed6e77bab15de36b9cdd2d0f3ca373f5b8498e6ca0b75010d17795dd758459b8e45fb2f22c15443166d6f5aa5
SSDEEP 192:LamkNC7SWM7QEManSNBb1RVpyCaYy1I2Rq98xrciL:LaZ2ZM8EhnSNBbbaB1DE9ArciL
TLSH
T17824AFB7420E1B6B2B471A30814B66D2C4147EEE5B1CF4B21E30248BF7123B3992577C
MD5 SHA1 SHA512 SSDEEP TLSH

Gaardene.inn

SHA256 82babd502a63a1f6a19a3e46fd9b0a61fc952c40c9a6c65c5578a41401af09ff
MD5 7440958a5606e81a5e9c51482004a209
SHA1 d4ba1215c1a1a288e5b3d46e24ea8e4f09b66757
SHA512 09c990621ae684ab73a7703f00ed152abd067087f9a012ff2fa70bd1733c3b5596a999627de73d0aab0d5edf66b83e8f585ce85496834fd76f66c6751946d277
SSDEEP 384:1uWHcPbEskSl+ZJkFGlAgsuPsFYA9PhcVW5RJ2NVRXNJ:1YPIblQu0u8WyJeJ
TLSH
T144B4E1B657E325D948760A1EF3017C80F50C662FDE02FA646C130CB7DAA606D69D306F
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Hallen.ini

SHA256 1ecffbd704d8f4090908ff803a63d410d6a44d5c2e9184f6f8f83059dc7125a9
MD5 926360f52ab510449a4c3662f80f6a64
SHA1 ff44d47f255a4bed1d896cb6a6130ee73a7cada6
SHA512 48df972902cf0d85bd048fe587a444fd353e7fb1113ba47953ad855fac4f9c0b66b2bc872e80936b76b84f5bebf17a8cad26044b274bb83daf4fe76f157d3845
TLSH
T1DEE0AB70CD8164808D0A33154D1236A2DAEDA95951F175B9FDD043AE1043915F3FE7C0
MD5 SHA1 SHA512 TLSH

Kodagu/Industriforeningerne.sub

SHA256 28f0060813819e6bcb13a784947ffb5256e4e2ff5bcc1e59107f9b0e3141b732
MD5 da68aa766276da02eb3e468ababaa6c2
SHA1 9bede5226cd64baf9970a7f34be844dd9fc07f68
SHA512 35b094b336139601d4913ccf43d2a6399a0c0004f0f8b2de533e69fc874145cd95fc7056f41cc17726464fa7ea61ae8107551daccdbe0fd15d911893e1a3c1ea
SSDEEP 384:LQlG2sKW2TkAeRMqipu4AByA9Mbpkz837Dkr/yGeWb66FWfSOoq/V9KKnR7yz+8u:LedWuZ1zpzkr/yGZbqO6w9mn
TLSH
T121E4E1377EBBF4C25FC5233AFAA3711166B47B0E873352BE050B5A4D248726240A95BD
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Melanemic94.ini

SHA256 e38ab0995ea3b3427d7e7f711b8104ee9850594a59fabd190c852dec40399fa6
MD5 44b0f5660765641a6f37cc7a4c988ebf
SHA1 ee8292f2fd48056fb001d1664456f7837d0016d5
SHA512 6f97ca98a78fd09e55cef8280336358cdc905f6bfd7de46d8e5a5654ae8a704e1b3c87f0186a5ca23e086dc3750245c511a8275f1b8b717bddaf8e8408457684
TLSH
T145F0DCBA4AB5255C274621B52A4322F908ACAE70C61CA11A30810BB983440EB953C929
MD5 SHA1 SHA512 TLSH

Kodagu/Overreducing.neg

SHA256 441d159862895ff41fa472d4a6c90f942dc5f811344474dae409b4de5d32ef1d
MD5 c4d70c16212952117dc8d41b6bf31c51
SHA1 64613d695c207c615d1d95ffd6533d80d2984efe
SHA512 29d3d24eb48b7fbef063536a0e8742d8ab65465f600a060112f4204505fb3e71790cd1d1afda591e2e173be1bf544e0524c9bea59d5879cc730c0727938aa931
SSDEEP 384:NPMUR5Ayf9Acv5YjyrCBIE4NgU8pedRkBDk62sFuMOOvnKM/QJ/i6SiR6CRkqiKm:/RBEpKtCUmJnyhpNAFNhQn1UIq
TLSH
T18C05E12E868F71B451A3A776158CD87770F73DC808A6E67A649E7D6C88C314064B363F
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Perikumbrndevin77.ale

SHA256 6d0d54ef0b467ed6b82aa80d22a5e0507be7af8ed152e230a3124dfd7d1c00ee
MD5 24b6fd805fa75c6134951e570b7f1e7d
SHA1 4b2fa41564e5ead929f156aaa1b1599325cc17d8
SHA512 fa4252b9f8422633e3f4d69ab78e7bb1671038efc6027262a94223abefc14f4ea152273044a2a0ae6ecc24594a6595533f46340912a4e656b232dceafa9f6646
SSDEEP 192:cg/DgVsxdFJE1ogz2jXao/A6q7vyo/fZAMKaSpmjWWmMAR+8MIvq6ZtritX+Nu+7:DFm7zcL/yFpS06viA3
TLSH
T178A4CFC2E85A4B16450B5F0099581F75EDB57C2A6CF68385278D6BEE3EEF3253218089
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Trochal18.vid

SHA256 4170d1d9376b612a44391f41ec2fd50aa4c358475162b4a640615b9fa09b7cce
MD5 1d5ca48e97e0ad19385e345d2e87ad7c
SHA1 2fec3e1801ed3a880e719e1ed5ec20706da856f1
SHA512 ff2e8006f2b33e4895054ca5adad54751edb043a2d6c461e615a61de922d71cfe1294285ab16a11c4f8488ec9f198f2f7ae5b719f3e81d56abfe8e39ec07f63d
SSDEEP 96:pFWnRkg0frvJvrvmUpkZ5+46fjv1LlMuI/CA/G9B5uRBc3aFDkkzcC:pFM6gQrBrvm5W4+jvRPOCNuzc3aBn
TLSH
T15AF3AE61D9C0550039ABB0F420933B0EE61CCC3600FF75E5E0A8786D2A872117759F23
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Tvttende.srg

SHA256 8f178b5e3c962449d245f066cfdbb6f7493a6577b768374a89028097b94518f6
MD5 6a1e63b9bf48e91d426aa95561c04ff5
SHA1 9d7c7b71d48408f37785e2ad9c9dc4f4f18cb05f
SHA512 77639e181670fb4bbea06e96285f531e2d15e3840584c7f871fc895c89554e31a7a19d2d541ecc60fb5af68c80a394f84d248dfb22f43565bc89c565e29a4881
SSDEEP 192:Fo6xaz0RCkouf+4h2hwY/TjL/e3kVuKgGWVzE5yqP/+TcT:FFg0+ufBsjeUFWVzE5JAcT
TLSH
T120C38D3AFF5E54E804F21344883A81B694ABE1F247FF81F2AB19E412E84C58D048E980
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Waldensian219.reb

SHA256 26be1022c8c11219e735a03587080c59c766e6ea56d0e3ae58dd217bfd57c11e
MD5 3427e63990c27a6f8384ec8d16013d38
SHA1 72b81376628f2cc77b64c90526e9ade6d2509075
SHA512 cacdf109decb9ba1e62e3dff66f98bc7e7971659097474cffa4e9638acfdb7f93a3e3159b5bcd3a8b21e5e2d987c435efe473e3bdf5cef4c70b1b3260e6e47e9
SSDEEP 192:oOVa4+lxElmYVvQCfEFQuclbNA/sCRP/tZlYvdpHLELWpviT4DNCritOcEKDQVBB:hAl
TLSH
T14AC4D066E3B67A8057700F338FCCBED9283274B05C99E534F10A19E01A62E3B5F4AB11
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/Waterhole.out

SHA256 9f1f8a0f918579aea22de4226803bd2aa8c8038ad2f51a2eb55f5cb1a3915d41
MD5 b32704472e91ca9d1bbe33e5a16330ba
SHA1 c9b250be517c98f71cb516fc0d45ad2626fab897
SHA512 f97ad39fb757919d981c67a5db285aacc5709963f56e7d382c4eb8f281a757c7ea2af10be2e40e2e66647ac229f30bfd21ff2ce697b7555c84f9f60be2dbf7ad
SSDEEP 384:vcRzubTlrmDx8Iu1sul7cnoPeW9444GUE2iHN82kABhy4vC6xqk2fVOMRGkl:vchuXlayIcs+QK45G8itxhxvXp2tHl
TLSH
T104E4E03B70CA9395559750DB71383FD089635EC262ACC42E60D46276CCD630DCC9EBAC
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/andenprmie.mir

SHA256 e3fb05ecd22fb5a7e9ee3fa9db55aad6e614779cf9fd3f64f1835d9c5fe7837c
MD5 4813d828ca44c12028305c56ce98b11e
SHA1 347b30fa77e9a06e00cad195009cd7ef39f95fbb
SHA512 1bdd47dae77d4d3ae4dddbc1d8ce0782aad5078282d8a535a6441a9d17fa2c90aad14d173233aef79be945bd7a1a44f1c8149102d21a830da0e67e616c2b4ca6
SSDEEP 6144:36d6Z3tmLBeYrA/JRSWIUnzAwOOtqUtpIrTy57XN5:T
TLSH
T11505D019F14F5FEA8532E7AF1700960CD20791CE42E2DEB8D1B6B36E8707B99384E455
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/betweenbrain.met

SHA256 bce76274c9d23d46bcf948dec30c2845bd50f4c94dda49f8c9ca216d740f922f
MD5 af6aeb3e2e422420fba96b0c1234048f
SHA1 ff2a6a43c233622cb686ddea75303b87b5503b45
SHA512 703411a9c2a4e29ca315d135abed8c0a09712770b94fe24a7a3e43ec35a5e357bc311771a6a4be69cdd7ead1c1c31c660f68fc61fb963f4bce25271202d39491
SSDEEP 192:A16mwADcd2WRFhOuwLE9Id1G7gQ05Cl3Hqw/PlQLOI/gYxLt:A2blcvyD5kp3
TLSH
T1EA147EF1C764093CB3928A9353E62DE8759497BCFB500C8355F0CE57AA81745A2B0F1D
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/bukshkkens.txt

SHA256 bca2b6e4afb46f63d238fa4b30ff074a3168282f29ed08731b821648b797c407
MD5 e8f4d3222ce4a7e65a11f094ebf910cb
SHA1 950583da759bf89b493e528af5ba4494d78de702
SHA512 948f8ea3cd30510221f7757c8eafbbc3838f1ea9dca43db24dba84b85b0d38a1778cbb5131fc2b99ffd904141bb6e747792fb0514a16a41b3823f0f34add7d66
TLSH
T15CE0E7905512771D106C414B5F51A9F141C0559C9114D87083C947D96E115A32FB963E
MD5 SHA1 SHA512 TLSH

Kodagu/cellmates.int

SHA256 83aeb56343f562349104c910f39b842c87e96a8b54abe42ceab4544bcbd863a4
MD5 ffcf33b159f455082c50e2dde55ac0c1
SHA1 8d87117f09f7313f5dbdb97bd59049ba01107f8c
SHA512 ac4c21366b87f590da9084ce3191098373266ea858f463d8b97565ea867b6012179b78bf4278932322dad99634c1db87081bcefd9464058fdef6a42cd5bd1862
SSDEEP 768:PY37vgS+cKQk+AqCnk3rkyiwfivNFcC5N1HOcio0PxcdfoIjvQeU:o7vge4cr0w4iioIbQh
TLSH
T10384C09C5301D233D0C79DB674BFD75197E231A91B684FC250D4152FAC83F252AA4E1A
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/coadjutors.jpg

SHA256 067068e8b8b9475b8ea485692666c5d0bfdb96368d3d89f04783537463d66756
MD5 417c23c6805baec39293936d4b56edf3
SHA1 6ee35182b549a878bd798804da6807eb8c95ec76
SHA512 2aa658c07dd08a9efeff8913131672187ce5dd70a4b9020524dc15a05660465c893da37a10f0d6dea116d55a2efaa473d4843eb68004afc38d010268a2ea96df
SSDEEP 1536:SXEI2N5l2FNrM4TXSFDR9ZEMElMHWFvbUiO3sZQI3WoTrbtJSQd+M:Kq/2FNrM4zIDR/EcmH33/TrJ8Qd+M
TLSH
T18133F2DDCF0660925B47CBD6B1E911FBB4F9A74A104CC4DFA988EDCA02CA923024D953
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/containerisation.pos

SHA256 699977c471f036e2e2793d45493195105f502561a9cc58a4ebe568850ee2e76f
MD5 fb945e2970f6823cbd097c8158406bb1
SHA1 190797cd381e586c11d6ae5dbda93f3d1ab7518b
SHA512 9ae9451abcef2e64310fe93a97af11872055fa0183499045778ab16e30ab9554ceda06eeabdfb4a644673bcf45c1c43f2d6063e2851156d82f45addcd7df624e
SSDEEP 384:ylK6dCed39yZ/q4m0tx1AT5Mtns7PdSCBVUrzm4K5Rv/kKQUps4c:yVTqhq4mZeQSCBVuXu/O/
TLSH
T1F354BF879729712F7F0F06946887517B91312C294AF26AD7CC8858E154D7CFBA446E32
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/crudest.ini

SHA256 92669792a470aeb25b05a5822ab5a4a94c655914a561510cbdeb549c629934a5
MD5 ff3dd3a76bef65e262d27deb52450416
SHA1 7351dbcbd5a9ae6c3acb9b5e1b9513231c03a916
SHA512 de0954a6c972302f4384913bf16e5276ad04a7e6ca9f73178d3da70df950b77ef7389a88ba62bc3fa5b09b2a932be0d506f7e43694d63cd7e75b3ad25172d101
TLSH
T172E0C6E48C08AA598D122628A49389F3E2BE04F7A765098703C2584E50C829A862CFB8
MD5 SHA1 SHA512 TLSH

Kodagu/danablus.tyk

SHA256 d64c5e2989521e6c836afb45bc5c64a4b9c9bc40462055c1526964174fd4c6ae
MD5 840b07446f58004d3ed5eea4a578c2b2
SHA1 7a83a2c5c061144d2390048e79dab919ab6d3166
SHA512 8d8836e5d4195b969720ac8c9c1d987e43f15be7994f4c09b59ec3a518ab34136a901843bfc3fedbd2406b7ab12ff4157e523de60ef108c1a90a4ea1106b7a9e
SSDEEP 384:ndZBsZJYV/koXNSi4WmoPIa634MgI9oSjwuWyivtGHBtwD:nd4JYNkc4WmYIaZMgI9scBt2
TLSH
T1FB54A0A672491EB47CC767F82CE9EE2107BCE465430BD6E9D5B5FC29326100B62B14E4
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/ddbolden.pry

SHA256 888991bf456ef4902b3c1fbedf7dd0e757d1f36ffb75d0b82dcbf721805025f7
MD5 7bf81e3547e427729ea5afc7c908da49
SHA1 d97a32f1204ab85c981d4aa126b6ede7337b5bd1
SHA512 d8cdd8ad3c2109e1a0e1214b92afe41f0412773449f62f8fdeb8b5e23efc604ed22dd587dc9f18d01c0044e0c560cbe8bf2bd7cbeae58d06a767c4420d88a68c
SSDEEP 48:t/JwdKZqoLRR7N1vsln0kMwTGCpoL0Vkx5eMvgLmc9A2hizkAh9DqKn85cQ8:AuRXLCfg5CHMndn
TLSH
T1C383191CC0186DBF5F5346A749F231725E59056C9601F80D4D48EAA4F2AB44F346F5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/dimethoxy.jpg

SHA256 531752c24dd79edaf9ef58cf5ba4f32d335250f059687a5701af9ef4fe610a57
MD5 6b8c30443dbe43c547b46e2b30714d1f
SHA1 4aa779d5b4c684365d7be557e1c00bea3706b568
SHA512 e8f4cea7f5eda8bd4cfe06d9e643e3ec2e1e3244675b347939b58fd14053c68872938d8ccd407caedd61666a565101a65cee2c53f313873dcaa669a2adb5c9aa
SSDEEP 384:npCjdIxpXIiDj2z5Q3QC55oGImze0HVdIxgDlza9rj9EtowVSGyJ:n4ExIiDjcW3QG+TmK2kxgZm9rRVSSG6
TLSH
T1EAB2F18D424B9814AF2CCBF1972D80FBD430899DBC6923702D6BB155B852DF78606EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/extemporal.mys

SHA256 b8d8a796cca44262575356175f093ede07ccf372da8f4947be0c37b2cfca3028
MD5 8695c942e35fb0a85e2bb284f753a9c0
SHA1 68c8a3dfd2e2aecea9df778b14303078c81f82d8
SHA512 dca2e523bd32ad25a530f28b74ea2c25f9e01bdd4a93ca0321126428dfc0321958cced81a0b1ec7581f32724c3b54664dc471b591fffac1dc8595ccfd1580683
SSDEEP 768:4KZEnj79CFQdO0sRE3nyVrfRxuzZy41UI67UaHKgX5s2AjQIu7IE8T6UiJACCqf0:CORE3uRigmW+aXIEUUmRp
TLSH
T15FC4D0051B18482B5E8C0E3B6A93D158E7D6D4F1C2B7791ACF63B84D2257ECAE0F05B8
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/flegmatisk.unb

SHA256 d78008256e7a69f87d927c131d1817699e013dda18c4df41d07ca705b296d6c0
MD5 677d9e3cb5ab056e267430ca74eaadc6
SHA1 11fcaa7878ba64b2915feb449722db3894fe78f7
SHA512 4213e4e6360b71830b389545229a9f23065f9ef0a22dec420bb10a0aa50ec9bf5ec3938e2c2e68622cc293d27cd03d97fb4608948859be2fd9f2108875ef6829
SSDEEP 6:LIa/QWD1vgIwlIWI1xILHaqj3IL2I6jws:LIIQWD+uWCOL6Oy6d
TLSH
T170D12B01D40C30409DE08BAD0D59073F63AD253050B03CF7BAEA1F190414E1FE718274
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/insurrections.jpg

SHA256 29e7ec0b4cab9884ce7fe17b5dccf4f3621826822bdd74b8691e21570836d67c
MD5 8bc34bce6971a061ead79ad4ce924977
SHA1 e42dcb41ac9ab639f41da047c2be79369b67c86d
SHA512 da8f87b062204be99ca1b87e975df954b75b0bbea0dc54ab9fdca60a8d81abb8d0f80b6a965070bf05edb2f9697a965d258bb42b3537bb01535dfa926d361575
SSDEEP 384:n9pfzqZmYktnRuswUGkGq0+MRPZWrDRYKzv9MRZ:n9IZRktnvwXkNw3+3FuZ
TLSH
T17962BF6B4AC7A991DF330A70AE151D6117BC1D12F672AA737846C6CB8D12F7C8A2C105
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/irena.txt

SHA256 8cf8bb4bc97530f1b8eb511faac8dbe8a8e5ab33b2a50d0853c1fa0e056c5dc9
MD5 1ebd668038182c3a3c11370b7624d634
SHA1 bad3e9209578f486075338b079155738558fa6e2
SHA512 536e2076968dabdd09345ae5899ed904aeb84907eb977aee37179c78e51fc8909c3a28ea61e2ca3b02b51fdad693f1fa836e2936cd182b71998c96ac2ca861bd
TLSH
T1D1F0475CDD27312E012FD8357D23055ACAAC150CD10C49D26AE30388965FE5CF316E79
MD5 SHA1 SHA512 TLSH

Kodagu/jetavator.txt

SHA256 4359ad2dabf6826f5336db04bde7256a25bcf717aafadc93cdf72facb0db5d6e
MD5 5a3fcee5cd9d6d4d9528e523040c1c85
SHA1 ef0623909171f9a505de3d37376f8b70f4d96f90
SHA512 67bbf3134063aef6c103e764011119e0212d9f86e422b3cc393ea8bc9ba595a8570258c589ea98aa26ad16789544a90ab0aa8be7ae55088dc8cf45a26da0e55a
TLSH
T192F02005C2E85205549207F1AD30288ADC6E8046A3297F8331E9539F84A69BCE6DF57A
MD5 SHA1 SHA512 TLSH

Kodagu/livsnerverne.txt

SHA256 7b0f97ab5c7c8cc55d0c3bb716dd3eefb01ce8da21c2c01a31dc40e306d7874c
MD5 ba918759755fd86c2736f550e3d58b4c
SHA1 e17928957ea52c579e7a502f2c1fe4f4129df88a
SHA512 e00e5fe4216bf083ea69ff8d04c7c7626b3621d1482f0e5437f96f86e593344ddc063feca3e7d6b2584cb0271c3ce5dfe0f9354c1d083ec38d8eb4efa96f2d2f
TLSH
T187F0D341CD414E2E1C11DFDDCE65957281AAE7059D3440F4E14A435F62176E9B73FB12
MD5 SHA1 SHA512 TLSH

Kodagu/mulctation.bes

SHA256 76cc9b16d4ddaf699847ee9fcf9f75080e2a5097e301c7d9ea08230c9581ddb9
MD5 aff921857ddb049b00231d9f9252b711
SHA1 d350a14e8f232fd1f811fa626053f8b948f550ee
SHA512 2a92caba811a4784ebd6e026c347957afb7600a340c5d9f222d004aa11f58c48b1f005e6a7a77a95570d68a896dbdc81ab0d5660f79969c596364e088a1c9981
SSDEEP 768:KwctHmsrOPuUEdGXY19oBsyzrJC7fbouW0s70bsAqQPX:bC
TLSH
T1A3B4DFC5F65A3F7EE49285167A433DEEF000884CF788CE85AD72B28450B37A0228609D
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/pausably.emp

SHA256 fba781f0404ffb8717775c1c9ffe1982fe187b5fdddffc78fd973f32b847d323
MD5 2e97e7ca4c7b4fd274a9d92eaba8866e
SHA1 ac87d259e1eb9b9ddeecdcfc233f692e5a3480a7
SHA512 12f5ac4eda2c2c274f61c0260172bbe8569ef8204a53a346ba64c1c7695a7fda9f57fecfb1daca099aef9108c2d5bc5fc7a3fdef288ba4a97d1baaabe252ce2e
SSDEEP 3072:iKR1LiOVu3Y3+lTm2+UAEqVxfvYFYArx9KE/y6Vg+inkFbq85E1FperP:j5iBecSBUnC5YiAre44+in4285aFWP
TLSH
T18EC4D0160C8C0407E16E0C7B061F435B6F2661CB9FAA144F5A63834CB96DB0DF91AB38
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/protravel.ini

SHA256 2e85df672a81b329773ed372ec5d1c744d8feb434df14b3ecda197c7829eccb6
MD5 813207bc3ea908be947abff3cabf587b
SHA1 a99f348b6be84405c157d127c85065b0e1a5b35b
SHA512 e4e32a71e72bed0f6f6b3d1c6c69ac694b6397ab9ce79e267d969a13003ebab4fd1a7baace079c3579e4a7546afbff2a01c0cce640c71e9de57b2540d1fffcbf
TLSH
T18BE0C0EBC136640CB965AA20F02045551F84327D0064059D1CDE4DEC6591184135CB6A
MD5 SHA1 SHA512 TLSH

Kodagu/regalere.reg

SHA256 624c59b85e7f13e3e991b1745b063445435453218b5512c64703c13be0b51ba8
MD5 e59daa3853c6c5e18996a7fd846628fb
SHA1 7e5fa0a9e42ad0585b7c86cec2fa45114e11b868
SHA512 dcdbef3009cd5ba501a0ae0bbf242534a68b7f4218f46a1130060753eae7b860a7c456291c757c34f2def1ab2041f2b6551ce9ad303c9736de0dedea073bafba
SSDEEP 384:L5plVhkwo4PiAeCRvSf2WMNY8AIZg+fUqasxx+cgxBe81blvox8YD23:A4PiUvS7ZF/t0Q/x1Cx8Ys
TLSH
T1F805E16D71A4534FCB142C67120B8C6617BD9A39826D53632B0F4CACA2DB87D99CEEC1
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/rerow.bol

SHA256 04857b941116691d2f5935f15927d4b8c28f234060ad7a422442eca55813e3f5
MD5 c4373bfdba6f2108a7175782ac5ce020
SHA1 66606b744075fedc78699161a801e96667619c07
SHA512 28d646e3863018006d63d7691fa0fc40a24dea8d3724a62764fce4523571ee61d45e355ab7bd6bf5dfd6ac987c417f2aa9e40a168ec8fed39c7a51863ef35c18
SSDEEP 96:A3sOTgYbUACk0UNWRkAPgVvJioD5IVOAaukfGmtsDJSmNyvGI7sEfq+0:A/EJ1DA0iaVQsdScyvGIQ+0
TLSH
T1A1449E746C8E34E783037729EC7673A6AB68F2B54ACC4F9574184EC6D0333529C585A0
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/rotoren.per

SHA256 526155ad2c6767654e7a859f1fa8d77bb0732291e48c9936ba14fba1de27e21a
MD5 5a52ecd6dc165c09c0f0a4a9f347caee
SHA1 8e7da8c2156935c71cdc8c87f30b2e5f1ad98a32
SHA512 333b19f68fac7c14603e042a3371e995a45d56e641d58568360557f208ab536a05691e5ff05e80367844f56c7fd93c8d2151bab40af33aef2407c2973d3d1319
SSDEEP 192:/9UrrSds6xPaVRJMBOE8oMQZXpltwJP6tdGI:FUvus6iJCV
TLSH
T16014AF69E1418EDC97DA0402E152CF6CF202868DEF4422BF7B466145A6C32D6E316FD6
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/stationeringer.del

SHA256 827b249d12a075f8cc5e7d7fee54fa6367dbf01083e669d19efc11f99af8575b
MD5 ce2955879bf2dc6807f2a12eade5f4d9
SHA1 3ccce7a8ab4b4437c272f0c26cae8d26591e4c0f
SHA512 b682435fb7d4bb0b31e5a9cdb58b6d8fb4a81a960c3bd87f9a78c7fbeeba1523655cce8bdc0b61a982dc5df3470b63d18d94baf6a2920c4711a5db49c9beb5f3
SSDEEP 384:dtqezFNpQjyAPjjtdUxOrVqc6vgY7M6KoTyXem1ELhwZ0S:XqCNCDtd86am1Qe
TLSH
T1F954AF141CDEF779510740586A8D5C11FEB7EC40AE1B600E530BB9AC993DC9753DC618
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/taleundervisningen.cis

SHA256 59c4887eb9d352b8699cb381156bff0598a1a52e894ba88d12395f9e3f32a3fa
MD5 93ea52040f4b8cbef9df5e87ce2f47ce
SHA1 da6b594c8394c135b77e993ec40994386d1636ff
SHA512 eaf9c6916da2462ecad1622854efcf58500125b9423e3f230cd0cf0c7a656d79d19b8ffecfbc99528d8a133dbe8e587be8abc542b6d601d256b8103b47469e1d
SSDEEP 384:NXLWWOs38+X7dRjyBhr8zxEJrxZy4rnIlVxiULh:sKMk
TLSH
T14CF4E11F78DA8CADC236431D90A01951D5EE19176A0F0DB7F94B87D2DBC6A7E03814CE
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/tarmkanalerne.jpg

SHA256 1c26e15c59798563d7457b049a5a6ce52a1a58730909bb76753f6dce0526d274
MD5 01ef1205f3196f0a3c073150e93a65b6
SHA1 93fa09a961b005870f10a283551a14095c1048ab
SHA512 c1449b04497fa45e4ebb2c2dc88a3bddba4e949376e081fc3a2faacf776a1a46e97ba715b2c6a5dcc25e166d5257c068e49aabf60d67b5c6b07af9efc667e1ad
TLSH
T1D151180647C30474DB3259FB292761B5B0DF88C6BFA4B9B430907FA11858C38855BA29
MD5 SHA1 SHA512 TLSH

Kodagu/teleplasmas.rep

SHA256 191257976bea68aea2cf57fd55646782654015fe128e65468498a46581674772
MD5 b293ff3c4c71ef0fa61618861a414122
SHA1 116b38fbf2d360d498ac45375afbfe1494351446
SHA512 e0615bc7acdaedf0fbdb9475890ffd4741d003c5b384f08383e288e03fc741b2f39cae9475d16ec85136f47e5261e664afdb5d8eb6d7bc79d133b8d7d2faaf8f
SSDEEP 768:59rp6R0WFrTJ5dSe6ZYpP4w+rLe98xVMstOemyJcHkE3CTmnoplcS9IP:Y
TLSH
T181E4D05335247285ACF4D43FA9AA0F38063D88191A6402BD1BC39A1F77DC9CD6B27B14
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/trettenernes.alf

SHA256 edf6f74a7e345ede7f5143dc3f123f14beb11254e512867eaba0fdb4dc246d7f
MD5 05b6f13858030e4a2ae8b596fc0d873c
SHA1 a4412d49fe678311d0565778490936a82212e09a
SHA512 f71556ce0d9533aafdd71278d5ee92b98eb0f97ca58798aabeb3aae54a66743b9898185035e4ab8dde359a2fdb900ec750c6019ef6b8007734a9693eb0354241
SSDEEP 768:+UE1yB6bqYRB7keTkZGmHtRadFjE0oSN/LzAJnzwzIj:+pjqYRB7vFmPYmo//GzwzIj
TLSH
T13BC4E0FF3C42948A8391B50C154E44A8DABB958E208D3790A43BB46C6BC0E67C4FF8F4
MD5 SHA1 SHA512 SSDEEP TLSH

Kodagu/vom.unp

SHA256 7fcca39dcab737546a52596bf1f5ea29112585e936a5e8db466ab6836dd87174
MD5 31cbf65e9233a58361292d9fe8b69dd4
SHA1 c5cf30b46d9562c526e1e87fdfc99f68afa059a2
SHA512 612b906c214e0cbdcd4c1176997a0af56c587e0d90128ad36dede7abf0a44aae7fb51ab3f5b95589607216a50c588f861590dc75f40e0a7d9160828e9efba0ce
SSDEEP 1536:S6AtKKABhkNop3m+dQZgVzXHsDD98z2f64GWdsL5cqjVP4ehlWLuNWLpC20m3oG1:7C
TLSH
T1C905D0C45D9870944AD83D647C9858904CFBD9E8A20F3C78E2B8A304FAADD8D852DD3C
MD5 SHA1 SHA512 SSDEEP TLSH

bundfradragsgrnsen.For

SHA256 b803ad27672c52d67d005a33017f5714b3d739a6e0cd46f84b22aa58e967a6eb
MD5 7b7de56d3ce8085ee4ceeaefb0200092
SHA1 807500d3f6b2b11d9400483e03ddfc44ba37ff97
SHA512 1a8938c1dd43cde810a83b86fa93394534eb463fae57347322bcbccdfee958572ea74c4f310a758f76d74e2bcc59c6ee1a95c0dc5c44f841492a3f65c5063650
SSDEEP 3072:XnyVw9rhAamWUjDbgILF4MPwpnMsrvhjh+jLs96WBoIVi8BlKsMqgIxkZ:vMaklLF4Ca9rvhN+XsXBLVi8XdMIxY
TLSH
T13114E0CBAEEFFC6CE690DD34D1E9A95F24F5D165B8B91734208814D4808DB06B3A5C8B
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Sales Order Invoice Reconfirm bank details.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Beskftigelsesudsigt.for

Celosias.kol

Continuers.sne

Craniums.txt

Dolktids.Ben

Fremtrdelsesformerne.ind

Gaardene.inn

Kodagu/Hallen.ini

Kodagu/Industriforeningerne.sub

Kodagu/Melanemic94.ini

Kodagu/Overreducing.neg

Kodagu/Perikumbrndevin77.ale

Kodagu/Trochal18.vid

Kodagu/Tvttende.srg

Kodagu/Waldensian219.reb

Kodagu/Waterhole.out

Kodagu/andenprmie.mir

Kodagu/betweenbrain.met

Kodagu/bukshkkens.txt

Kodagu/cellmates.int

Kodagu/coadjutors.jpg

Kodagu/containerisation.pos

Kodagu/crudest.ini

Kodagu/danablus.tyk

Kodagu/ddbolden.pry

Kodagu/dimethoxy.jpg

Kodagu/extemporal.mys

Kodagu/flegmatisk.unb

Kodagu/insurrections.jpg

Kodagu/irena.txt

Kodagu/jetavator.txt

Kodagu/livsnerverne.txt

Kodagu/mulctation.bes

Kodagu/pausably.emp

Kodagu/protravel.ini

Kodagu/regalere.reg

Kodagu/rerow.bol

Kodagu/rotoren.per

Kodagu/stationeringer.del

Kodagu/taleundervisningen.cis

Kodagu/tarmkanalerne.jpg

Kodagu/teleplasmas.rep

Kodagu/trettenernes.alf

Kodagu/vom.unp

bundfradragsgrnsen.For