a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0.exe

a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0
MD5 abe174c41213116296a3b56ad13516ac
SHA1 5145bb8eddc9100f312559ecaa7669a48218d5e9
SHA512 3faa0946b3ec8eed2b4764917d37b6c6594f664654c1792e0ae682a0d3ab9fc16939ae2409f19da2e2a82946a80bf337a6a651e5cd19574493e88559213f456c
SSDEEP 24576:tTAEyoZdD4loaosHamT/nomuGdhSnaGpFIVbRpsRwpOcd6sdTbe7kNA0jgV67Y/:ZZdDKrokDjdhcIVbRpsqrd/fn8Vak
TLSH
T14F352310B3BA8147F0E62234496A33FFDA67EC29058993163F103F577D329B0869B617
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

51:ee:2e:be:4a:74:57:4d:5a:93:25:21:62:95:1c:e8:65:67:77:bc:d5:4a:0b:4e:bf:0d:a6:65:8d:f0:a8:99:d7:dd:43:b8:14:bf:cf:24:6d:66:36:b8:fd:35:99:22

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Ravjyske,OU=experiences athel\ ,O=Ravjyske,C=GB,1.2.840.113549.1.9.1=#0c1b4e6f726d616c6e657373404f65736f70686167697469732e4c6575

Chains

Jul 10, 2026

CN=Ravjyske,OU=experiences athel\ ,O=Ravjyske,C=GB,1.2.840.113549.1.9.1=#0c1b4e6f726d616c6e657373404f65736f70686167697469732e4c6575

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Daddling

SHA256 075afd399951322a57cd2bfd91adf8f4980f11daf5af4ed1fd8a07d851c6e1de
MD5 0c8208ca681d5dc997ae96638403a623
SHA1 5ce4b0f8951dc8f4db40b0e07ee85392bdeacb9e
SHA512 0596a42c46a29fdd4af8272d5c330f8b862880f31ee92a874f98d07e5be711738252c6f1db64ea098a06a6b7fa94ef71d70ddd2bd85ea57c59effe1d2b8df559
SSDEEP 384:9fmiC5XG+81GqRKGrttC7OU5h7TTdtKmROs5lG9RIOixP9k/tKr8MIz1TTQqN/ou:9eiWw1GqRKGbC7V5xfKmUNixFIGI7Q+
TLSH
T1C2F29E5FCBA58CB6CC02D238D47F11961E68A016CB0FE4AAA172B455C6C73D357706AE
MD5 SHA1 SHA512 SSDEEP TLSH

Dataledninger.jpg

SHA256 08cfe5ef0c314a08a970806737c787f94ad68745ba9e245ad95a00c7ec038e72
MD5 aba12028794fa0aac2a861b83f2b6e04
SHA1 36870532bba5d0ecc095b3e699efbbe4180f2dbb
SHA512 8c3830d701f65164bb1729d156603c6f5c3557cf9f6fb5f89a37a069ff06977ef2b01cb134e8f60a69bf503ca5c41469d21ef1bff5e39584d7d243db9fda9e5d
SSDEEP 96:RhrEAO+BiWSoSsOViHgKLC+Vw3RP+iGOUUAAt2tu148LbpfRbyaBG8HgUKIf+:LrJOdbsbgKOnPzfAgRy8nSkGsg3IW
TLSH
T174C18DCBCA06E2D0DFEF953F60AE617285CE94C072947470B1206136CE91CF29568BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Feltdefinitioner215.afk

SHA256 44ca75077a923a9eb88739065493fd1d2247073cf020b3416b4e856320ac1378
MD5 9e1cb8a3e9fb758d2a75372a5c4dcbaf
SHA1 b27689f52aff84c545768019a21d1ec168bd3961
SHA512 db4dfd6578bee6d99b8b6a9b700ab1d6d11bd3c9b0e0bdec932c22049a273a376baeebd26f321d82baa1d00a6da90ebb913694aad02397f1bc5073131a2a94f5
SSDEEP 384:rXcX3LliqU+0rp5OpuaVWn3EhaGZq/2sNqKQYf1S49svLiacloE7WKmgIB3YPSbC:L70K3ZaazVne85cUzgRRoL
TLSH
T159962388C2F2C4445261651BE0DB4C694D8A6492B095337A40CCBBF6F7A9D27A67F3F2
MD5 SHA1 SHA512 SSDEEP TLSH

Misrealise

SHA256 dc26001c8865472304c119032fb102c7f9931e99bc16c1d242f2ec835080c5b7
MD5 d444b27f5ec85702d81c769be2c710cb
SHA1 8a96aae3497cfa40a5b71c05efd078c24a8367e0
SHA512 7eecd309f4c8fb840686154341315d2c0a6111a035d43c1988d9607fcb69798035d70c7899013b87f84cebc6f4a8a7634ea49b05e0b09cb4ba29b79dba6fc568
SSDEEP 3072:oml9rs7hFglFQujWXh7aaaaaaaaaaaaaVl/nORD:lPstnFh7aaaaaaaaaaaaaVN6D
TLSH
T19DC3E0C92B67AC79C6069034D7A86E7AC51CBA781D17787D603A714CDE0D36912A2CF3
MD5 SHA1 SHA512 SSDEEP TLSH

Spaltefrugter/Overholds.jpg

SHA256 37123b28d569ed0f17495b76a5f949b2c48ab889b6b6e6816e4c503e1c85e8ae
MD5 a9a1e9223c73a9143ff8e493ff970846
SHA1 361774dd069fb0da1c16b0ab516c73d07dac8cac
SHA512 420a28ca703b2e8adc9c295f4492dc24f80aa49f92dcd3bd2b774bd40c9e46a7b214e18bf760802b0de6d3bbd064675384fc7370fb0d6aea52fb6e05dc7ca698
TLSH
T13A514A114BA9B239BB8B623D1F0A35F780E0CF4B7D5007791F921681D2A8CF0EC2A758
MD5 SHA1 SHA512 TLSH

Spaltefrugter/Teminalnavnene.ini

SHA256 ddbef9b550a3f874b0e63896cc819d9ef59d5e2201026f2f5444d03fd887b2b3
MD5 3c6c596ed332dde812281e5888ea5218
SHA1 bc689b30f5f3b613021e1d04461d9cfc68e212ad
SHA512 8349604df417ec19c86783dbef4acd1543714ff561476671eb605d6605b6c5ac69da38deac2e62062b00ebfb401fd53028ee63b8a41959f869ead4cbda012424
TLSH
T1C0C080D70119588491017F13FC34FD6A5255414D4F51F15D691C111417C445545743B6
MD5 SHA1 SHA512 TLSH

Spaltefrugter/boondocker.ini

SHA256 714229540a17e51f008145537b0e7e733d51d9dda40c7add16ef3b9d71147d68
MD5 b9bfefba1c17247260c8d2699a5f3dda
SHA1 06ddd8b746b58f19d136f4a37985bc72481cf5ea
SHA512 b73dd322d1e5b5250b73fd73ba8f524ffd692dbf7f1b70fc3a4949a1072f9d40de7ed82e57542eff7f26c6515583519580ccb8fe14318b182c2862a1cd70e2b6
TLSH
T1D7F005348372051B500FCADFFD25743042F240054D1521F276AD9791458505CD1725ED
MD5 SHA1 SHA512 TLSH

Spaltefrugter/dekalumens.pre

SHA256 060c35f322cd143a1018ae7b4d743a5696b70bc114950bf6569635b6dc642d09
MD5 7e0851ec76c5aa6b133a784da062db29
SHA1 81580feca71e5b21d006832a04130c76c7bfb82a
SHA512 65a729da965e0c091d1f32e50190de5cc71e2888689fba1a4ed02ec156026111a6caddb689f8ff85f648f3061c70f3f830fc7131548af9bfa3b3506ec7508b24
SSDEEP 1536:/uQPNFbBVWU2nuePzIMQk81Sigtz0XtOHo9OwovDcM37msfncVM40MLFmTe0GStb:0bL
TLSH
T1248623FA94422D38D7314E4F528FD79AEE37BA951051A1817FC7078DB2C37A71492263
MD5 SHA1 SHA512 SSDEEP TLSH

Spaltefrugter/demirep.afv

SHA256 9ea84e2d8cdaeb4ea529d8985c442176b62886617c1db1fca70c08230ebc786b
MD5 aabead0363075ad4386b677208c5906e
SHA1 9ccfdb5662b1e016685975c8905c8e7cba568e90
SHA512 fd10aebe64b29ee26eb46d8040af2239fbaabb096c3cf7f6a3ea29a75b7dc163539c1fd1ed3e001febb9fa45777e1f9054b3c59a65d717550aa7afa520092d52
SSDEEP 1536:YRgk4V6bdNPjMJ4D+izarIP7VzQhXy9YkzI0Rq2e3ugTPlW/UaTusAQ8Ij9/TFje:IYf
TLSH
T11CE512E921DB9B1FE065F01C96DD037931228B8A85548229E543B76AFDE7887131E783
MD5 SHA1 SHA512 SSDEEP TLSH

midtpunktsmetodernes.ela

SHA256 65440131635ad27e2fab188daa379634cb80da5d685b6da839e718088b124895
MD5 0a268ec631b260d3304a43658aa7c79e
SHA1 cba2c24694a9916f728174bc4fc439307d04e7ce
SHA512 4fddc7edd1ce5056a79a2ccfa3a55e06b12f0df0dd490b78f20e7145177ae9c570e1caee3b01326b028ebc81ee9cce807d6a318e6ac53e154e72bc2f7aa245a3
SSDEEP 192:i1hid4pPG6pWyBm1bfvvSt2Xhzig3BV3Ztt4OdtyrXwoApVWDYcLKD3K3MhBCT3K:1XmEwb7VwMPbgKkOT8KCNhqN2l
TLSH
T1AD86220CF67FFF62020993241C2F92752E8B9E95A023334A176C49BA958CDF8B845F61
MD5 SHA1 SHA512 SSDEEP TLSH

skibssiden.ini

SHA256 9f6f318d467a1daa3853806d2a77f1909543aa16813de54c1f304588e464298a
MD5 24bbfc3a77ec7ec9c96832a42417732c
SHA1 bfd64f8a4961d81c948a1c5524edabb71d0e4bd4
SHA512 11e20870d62a4eca06b4613fc528b596d9187f18a1f2be754716316a8298724d4acfcc3de1321100a47d6ff0895ff4c6581c4d0e693504b6f3b85ad04b821c99
TLSH
T15C017585D7AC99B40703B2157E65B3E2EFADC64031425E484D0A5290180658FC183E70
MD5 SHA1 SHA512 TLSH

tandan.txt

SHA256 2535e8dcb2158c0bb001b6714e7c1337421d01a6b62655dcc1d20ffb96e006b0
MD5 0791373c12a3a6e840209cbde9fc531f
SHA1 c8792b4c00d09892171c6ac7ebd2dff826673452
SHA512 f4adb3967ab9c5f6ee58ff256b78c017e5463a97d7a0198fd1c34c3ac61ee5b130caba033200af3e626189468d86e1393c3aa73fbab4bc124e539658e39df3a7
TLSH
T1CDC0804C5153971707492FC6056B3E5914B4820CD8CDD439FD74D3653517D4495D8D8D
MD5 SHA1 SHA512 TLSH

uvederheftiges.txt

SHA256 15d3844abb9fce52981ee7985ee8cf24a7f09486b18d60187f5128d92d6c6c45
MD5 806ffa7df0021bb6013681c4395604e9
SHA1 d809cf762ca8f5dfcac89edb9dd320c7cdb7b081
SHA512 a5444c7efd183ceab047d03568f80f6f49d0a0e9a81f02319e8491198b3b8f40eda162ed6b2d1482b362f953bd44025c4981a7dfef91f30d65c8c188373b54c4
TLSH
T1C9D0EBA01BA382BDEF106229BD270FCB9DEB403B03311E3482A21D9D7D0987C1234CB6
MD5 SHA1 SHA512 TLSH

a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Daddling

Dataledninger.jpg

Feltdefinitioner215.afk

Misrealise

Spaltefrugter/Overholds.jpg

Spaltefrugter/Teminalnavnene.ini

Spaltefrugter/boondocker.ini

Spaltefrugter/dekalumens.pre

Spaltefrugter/demirep.afv

midtpunktsmetodernes.ela

skibssiden.ini

tandan.txt

uvederheftiges.txt

Sharing

General

Malware Config

Signatures

File Explorer

a00952a8a5fa01b477caf86fd71aa08e3ac4ea124c8178db4bf6676a995a09e0.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Daddling

Dataledninger.jpg

Feltdefinitioner215.afk

Misrealise

Spaltefrugter/Overholds.jpg

Spaltefrugter/Teminalnavnene.ini

Spaltefrugter/boondocker.ini

Spaltefrugter/dekalumens.pre

Spaltefrugter/demirep.afv

midtpunktsmetodernes.ela

skibssiden.ini

tandan.txt

uvederheftiges.txt