Transferencia_recibo-_18108714[.]exe

resource
Transferencia_recibo-_18108714.exe

Transferencia_recibo-_18108714.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 0ef58df8a376367a250f7317fa787bb9b189d7f8f9cbcbf292076f4240aced22
MD5 b67833a72285c5f1232c47ae94ed6ca1
SHA1 0dc96f8ab9fb06e6a65712dc405a20b5d0ced471
SHA512 af4c2277d1f4064d192445dd1028afe4bfb2422c2a8f4d82683c561dd4b3ac46245a4a8ce8b836b10007c20e15f3e2ce5d053917e6e7c8313fb8c0f47c0d82c9
SSDEEP 24576:ZMwHqUlYuKq1Pa3WXnLosW5F7v9CIWMOWvB:ZMwKVqMYnA5B9qMOWvB
TLSH
T12D15230723F0D156E16688721EBE8D85AB8ADB1614F7CE5F03118F5B6E027C2AD56F0B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a8:88:2c:12:c9:41:c7:c5:69:b9:3f:f9:fd:9a:70:d8:98:93:15:78:24:a8:29:80:0a:7b:3c:de:a4:e4:bb:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Interresistance,O=Interresistance,L=Lärz,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c144c61726b6965723433404b7279626479722e4175

Chains

May 20, 2026

CN=Interresistance,O=Interresistance,L=Lärz,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c144c61726b6965723433404b7279626479722e4175

PE Signature issue

Digest

7b:fc:fc:b4:91:f4:26:39:d9:20:10:c8:ed:03:c5:73:28:6f:f8:67

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Interresistance,O=Interresistance,L=Lärz,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c144c61726b6965723433404b7279626479722e4175

Chains

May 20, 2026

CN=Interresistance,O=Interresistance,L=Lärz,ST=Mecklenburg-Vorpommern,C=DE,1.2.840.113549.1.9.1=#0c144c61726b6965723433404b7279626479722e4175

Minor OS version

0

Major OS version

4

Entry point

13455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

Shina/Inventars189.jah

SHA256 314792dbff43ef96bc4f1e31ea989621e4e9ac613be1362a9d8da71dd5d005f5
MD5 f79583debca8bd3a88253c83e68f5922
SHA1 fb1ef83ce3e963dc0e1e7ad6c493f2c9a24dcdb2
SHA512 eb92246ec173c57eefe4ea81ae33eed15ae7914e024a56b352879c90cfeb2eb2c9f22831d1217de53c507b2c6b65608b4523bb94e0f633029e5b0cd71a31e920
SSDEEP 768:aSr1grW7vLob/4Fznhim5Yn+23XfR2j3bv7jech58TLtfDu+Gb7LpJdcGbHyhNmH:m5ilQ80pt9WScB
TLSH
T1BA66122E6B41B9CF1E56DCD798714A431A6C68EDE33932609ACC6750423F72B11EF41B
MD5 SHA1 SHA512 SSDEEP TLSH

Shina/Trotskismens216.txt

SHA256 cb108b8972c11d57c4384ac780af6974cc36375d6e1b1ea8bfb0af68f988adf9
MD5 edadf5765f4554b985130bf058482da5
SHA1 73a223f380ee12053c18601492c406c90dd49081
SHA512 da7a66172f83745b88bd56e30939054ca4942e26d3e3b4305e3d370cf1ef5d621d2d1fd1a977b0f24f7f4690668358a192197deafdcc75ff5083d65e5e7bb806
TLSH
T11FF0E1111A86893044F36742B982658757161359861A6B0CBBE9708B210716D997AE30
MD5 SHA1 SHA512 TLSH

Shina/alkoholiseredes.rau

SHA256 f99ee0b4d55768d8d38bce26906f6ccfac16ee0a88337219c16fd5b50db15391
MD5 4407657cb0129ff94c41675cfae0a441
SHA1 bfc79f6f174a29ceb8357b5e516aebff65f5793a
SHA512 34e938b2f507cc4d3fc0d1dbab53a6b078b7c7561fe0f4d06f3e3fdde8fe0c152fefc360dbc83f29e1becedc40899460d047bbef5412784c0b79ed01e749c222
SSDEEP 1536:SsJHbhNsTDFq4lSB83B/cYstTlmm8V4LZdsqkC/4ajgGjt87RoorepjFcQbomsXl:Ch
TLSH
T176B51233D85242660C6BC706C6F8A8176F81702E71A7E1E787A97869CC55A4CC6DFE0B
MD5 SHA1 SHA512 SSDEEP TLSH

Shina/dolentissimo.ini

SHA256 27dd1e57c7eda0e1e7e4c3dae932c841de8d8d9f542b5fbe6173f94a342a781b
MD5 48d6a46d7baa781091d6ea96bf8331a8
SHA1 c414a0066ea2321b059947c4883cc96c3d0540df
SHA512 2a95e63d566eff6a450c81fc7f405c6b60bac84034f087788e02d6c0554c3f1c6cee49e69c2591642647bf0d9174e4f78063d7a349757eecd034b3855de079e4
TLSH
T12D014421D41525380D5B35A0EC51161EC545494A4E520DD94FD0135E90074BDE33FD25
MD5 SHA1 SHA512 TLSH

Shina/endkkerne.Tra

SHA256 3757e81c4b5d9ca14002a956c1339fa241a9ae43ba9f93baa7f8b5aa2c03d394
MD5 9933f64f693ebc2f9fb963d293875658
SHA1 a2675d6a65d71856bbc5bc113e0b0f6deffea58b
SHA512 3b2b5da4a3cea1d73383b3eb4ba4cbe67f2352fe26772bbb307f5e0a3cef6e365a30af269d93d2d702f5d4243a2d1e8e003df30a3cedc1bbd2014033cc2526dd
SSDEEP 1536:AVX2rd4mnRDDqky1kBVPTqz0icjzZ1LCNWEshQc:AVX2x4mJDqk26Tqz0iuzQOf
TLSH
T15633D06A976E05580D5022A9B78144323F1A85FC92F895B3BE8F64EE31C8D1C47EDED8
MD5 SHA1 SHA512 SSDEEP TLSH

Shina/fjernsynsteknikere.bro

SHA256 2eeb69071cb750b4ae0834e67f86a5ebe1dbeab5250ad8406c08906c4d30234c
MD5 a2a398f21ac4b033d9d3f7f9d3efc964
SHA1 110f672af4f3b4b39c97265ff806d706ecef0af4
SHA512 4bfe8a180e6f3b34deecb4ddc3d5bc84adec6bfeb8c7dc465cd92e97407a2edff9ef05f00535a524e445d5005ccb4f603aff7ad821cdd042dc34fdba2effe3c0
SSDEEP 1536:lRvPvh9m11uUJCVYvM2MUHw/i97s2MmGquW41wtn778x3o9:i
TLSH
T13A55020B22611A96920147E5E1A73392EE4705FE6A709B1E84D8B7857E1862CC377E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Shina/indexable.del

SHA256 760d3c817d0f3c029206deb38026a628d18e2f31656f7135186d62b00e97bea4
MD5 73344ff4eefe1d8811ecc97a1b63cc6a
SHA1 87d62bb3fc0d699d21c343d23e207430a3fdf53a
SHA512 7f40fed84e5628782c71caa71d320cdf513568adb552ac9a45d31beb25e620af06d527a85c640d9512bb59b923e2006b2a4844d9a7ad68ecbe3b39cbe535fdec
SSDEEP 384:f4BQMsikDg9cFXJG0RaRoffCAEBLVZQ+/kPp+A1zqh1IedqMkJW2IjoJKaxkpcaW:6UncAoS4y
TLSH
T1664612A04EF98D125091C49E97DB929D5D2C63F4B43D3E0698638EAD06094F1F2FEED2
MD5 SHA1 SHA512 SSDEEP TLSH

Shina/saudiaraberen.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

truckway.Fol

SHA256 a58283f08b9aa7a9555bdf380b1d3737350b6929f127b493002b9f7e18987ba7
MD5 553e3961b6ca2e8d66165805122d133e
SHA1 ea02ddec7b5dde1cc37765a010a5d6bbc9701905
SHA512 9fe859066a12dd4f0047b50ea81fa3c04977cfad954addcb96dfb0475de0e91f743ffa33b7a0e73ae53e744d42b1b4fd52d53e68ec4dedba5d313f3e1aa18678
SSDEEP 6144:NZnC4aSk1AuxhqG925tokRTpiv6l3fFfbRzBNDToMrQrmBd9AI7Q:a4aSk1AuB2zXp46l3RTxnrQo9AI7Q
TLSH
T1E384F18F846039A7FA256139D0ED937E45670E291A2D70EF04BAF8CD1853DA2B52C73D
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Transferencia_recibo-_18108714.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

Shina/Inventars189.jah

Shina/Trotskismens216.txt

Shina/alkoholiseredes.rau

Shina/dolentissimo.ini

Shina/endkkerne.Tra

Shina/fjernsynsteknikere.bro

Shina/indexable.del

Shina/saudiaraberen.jpg

truckway.Fol