eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8.exe

eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8
MD5 340ba0c0a4a4f53a3637015b5d41de7c
SHA1 ccf25191a1f631eb4288dbf41c33bface4be593d
SHA512 1c784b451e20e25e0dc8e2f21b6ba2270e8a7f17568b8a9bae020c2b8d7c83ee7936b907ae5c5b218026fbe3ca8d3b83a378cd9926e81679c0deba985fcd7c29
SSDEEP 6144:9mOP320cNWoP78HOpf1iDLl2r4G7fHT6Jlvi4dhMMdCRXcDmXuWnknhrJlYtWp:BtoPdNi/Sfz6Jw8hrdCRXxNEhPYt6
TLSH
T1E374122125E0CC67E8734C301F6F9EE6CA7667F943242E8F5344A69869A739C4E3C356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a2:3e:0c:8a:dd:26:89:18:a2:47:f4:20:db:85:9b:f7:8d:ca:8b:f2:03:50:03:77:36:c7:b2:c3:d2:61:30:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Forretningssted,OU=Leawill Unmoralness\ ,O=Forretningssted,C=GB,1.2.840.113549.1.9.1=#0c135073616d6d6974696340436f6f6d62652e506c

Chains

Jul 17, 2026

CN=Forretningssted,OU=Leawill Unmoralness\ ,O=Forretningssted,C=GB,1.2.840.113549.1.9.1=#0c135073616d6d6974696340436f6f6d62652e506c

PE Signature issue

Digest

0a:3e:b1:53:ab:11:4c:b0:32:57:70:13:70:ee:e3:66:94:3f:60:3a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Forretningssted,OU=Leawill Unmoralness\ ,O=Forretningssted,C=GB,1.2.840.113549.1.9.1=#0c135073616d6d6974696340436f6f6d62652e506c

Chains

Jul 17, 2026

CN=Forretningssted,OU=Leawill Unmoralness\ ,O=Forretningssted,C=GB,1.2.840.113549.1.9.1=#0c135073616d6d6974696340436f6f6d62652e506c

Minor OS version

0

Major OS version

4

Entry point

13117

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
MD5 9625d5b1754bc4ff29281d415d27a0fd
SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
TLSH
T1BD325D06235081F3E1914138846B3E175F6A15069BF58E97DFD38646BE30BE7BD79503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH e2ee55bddad4241d619d6a8a38e2d869
SHA256 86c8ee210e6611383a634dcb8c60455063ddae3d7adccbeacf3adf7bf2a46676
MD5 d2e45dd852a659e11897df573832f381
SHA1 19990ee627c95b6c18d3b5c5f0ec5c24791d0af5
SHA512 93c9fa1767f3e861fe5765f2940aaba9eee6396d069c443ac6cbaccc88441b2bfc3c3af50a8044161f96bb7eb81af1bc6c1fa754d89740d0a2a8d591fef11073
SSDEEP 192:o18cSzvTyl4tgi8pPjQM0PuAg0YNyfIFtSP:8BSzm+t18pZ0WAg0RfIFg
TLSH
T1A612F793E5E420B3C6D3523F35BE2B2EC7BD5335B0512C0482738A497A6947A6E38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Chartophylaxes

SHA256 07d378416a6e663e1b791eae1de7b7ab119664218f80c7d3d2eb8f4b3c710e6a
MD5 ace87b0599526a8517c14f0726942109
SHA1 e0e47f81e0209cea47693e53d4a80d3dcadef69e
SHA512 cd279b210ab3aa686e5fb4994a0675fbeccbabedfc6be37b9a79c975cc11a49ce18d4149636ec1cabd2861142d8cc72e47bcbe49aa4e8eb3d9858560b58226e0
SSDEEP 6144:4R97uWA9JQi8oDbqytLAkA8VzsTHyAbZuCwH:49i8ImytLAdKzwyAbQCO
TLSH
T12214DE538B660866E5AD4330DDE33ACC2919EE41EC9B3CAB9317F09A05745A47732DE3
MD5 SHA1 SHA512 SSDEEP TLSH

Fugtdannelsernes/Eminencies154

SHA256 16ec7647029ea99c8a2115545a25851fcaed126b269ad2b874225785f71b6460
MD5 bd803fb61916adca129777ee0c8e09cc
SHA1 6edb84b1fcf68179facec614998f89b0c362a8dd
SHA512 6288941e564e1e2daf56c59228d8848cf580de53e3d6c691436973f4c1039a4f00734ef983cbccb9285b3e0fc25b2bbbf97ade249c720c822035e88ef80b2a97
SSDEEP 3072:1kgTIMgWhZSHi6q5UFO0g+TJ2jXPvFjUofOmQbdR:1TcMg4X6q6FO0g+92j/vFjUodQbdR
TLSH
T173A42C5075CD8AE0F61A5984EA78FFB201733973AFCA1CD22324F5004ABE9553A4DA5F
MD5 SHA1 SHA512 SSDEEP TLSH

Fugtdannelsernes/Tauropolos.geo

SHA256 be38ab61b03f23cf18f01c91d5842ebb28c7adf862513704e751d3e5916d8ef7
MD5 0f5ceb3bdb1c41df4ffb579d7a636d69
SHA1 4d04a4259406d0fb0288a39528fe5c121f193f13
SHA512 44987ed089f42688475bcc93c168881423f5e16acd1216d4059c2bf9a58477281f7a2d5b43b032bb8a9dd77b2a49ab24866d9708959a040965fee512667fc990
MD5 SHA1 SHA512

Fugtdannelsernes/Tvangens.uni

SHA256 ce9cd219d95422af02281cf5fa7241dd4b535d8f166e689e2b0fa1e4324bad74
MD5 08adaa4ee3c41948e5bd5c12af5df278
SHA1 a8487a05ae105a70e412281126b1b88c95f875e9
SHA512 ea80d1b0bfe9dc4204526465de799b950c4a2c985ddb62671d092b95d76ec9337ffc63b7e2385013ff5d6f700ab155fed0732b80b6de25aec5b08863b5b65830
TLSH
T1CDF0040D47434007354C7351D10CF074400504F0744503C30C1473C1D00C4011345074
MD5 SHA1 SHA512 TLSH

Fugtdannelsernes/dieselizations.bri

SHA256 ea05b92b4b1305a73fef64f61944b74a20b35ded93286815a8e49e4ef58187d0
MD5 4c14e0aa6e4bafe6958cac8cebbe8514
SHA1 a8438de6a908a74420446bbd049e26d257734ee9
SHA512 5ddab7fb781a04388b0ee72e85476f012d4464f082078a6e62de1870608218c7c320b475e90139330f4c5cdf2169fafd62d1e5318ddd22c5af60763a409aad0c
SSDEEP 24:j/QiiB/WSum2ITJySD08izUpBbi9t16hB/8o1DIA6NpFffnf:W/WSumnVy808i+myBzDIAKpFfH
TLSH
T1EA330A1266C82ABF888E7509C608AA7134DAFD108B978273FD542FB77F21B093447320
MD5 SHA1 SHA512 SSDEEP TLSH

Fugtdannelsernes/francess.afb

SHA256 4b0194e63bfa4b2ba6742394a45bc1d56014f9e929573c531e65e229f0a1d1c3
MD5 b5a8723aa9729b8e4ea965bb008cda01
SHA1 abd29e2c369e1b9ad841cb784d59155cc6126ab8
SHA512 16570fb3a9ecd4f0c3ea2c15212a88e6c6f176c9a1adf59a3d485829f8ca69da38441d039bef0a1ac8a32aed73709affe35b7617dc1a07ca87174cb749f815bf
SSDEEP 48:meJznAfdIGVkhYRIq2Ad0M1YmrdV3v4X4hU:meJznEICk6RFZhp14XL
TLSH
T12823B84FD5CAB5807233F80485DDB7AA512AE712A1D4291DCDE0F625E3179B7C2CCA54
MD5 SHA1 SHA512 SSDEEP TLSH

Fugtdannelsernes/midriffs.ans

SHA256 93439d8b0e1589f8d6b23995aac6154351e9d43388b4d4c887eef27e9e49363a
MD5 31d2c04a1f1b224889fb282cc4551dc7
SHA1 c7c472a4f82dc76945eeaf823ce13cf787ab17e0
SHA512 3f749d715c80de2cb38423137d4438a5936616f03bcd04e6b66407638050c0b107cf6aaed48e025ed1c0c93462d3dad38fc934cc552f741e1ec99bde63f748ab
SSDEEP 24:52NxmV1b7MC18bJbr40NGCXWIWlWZ9sL1MY2/bcCFLQesMu1kg1:5RV13v0J9ICmIWlcSaLbNt3K
TLSH
T18BC281161B3E78939EBB5390239011DBB7613A70A08638F0D8684826C529888A9822BE
MD5 SHA1 SHA512 SSDEEP TLSH

Fugtdannelsernes/svededraabernes.kab

SHA256 4c2b31077809991e9d1590284157c1ba65f71e544cd748f2fe28576ddbbbde1f
MD5 e5a89dcba415688e07a4ea7569bac2e1
SHA1 4b26620f92d384b63d9feb81c95e049fce28522b
SHA512 c9423cc2bbc83165bc879cfb1fb8149db57c71a4718725bf1fb18158bdb742faa223bc2806b336dd4e3013a7d99109ba9f2bec5fe798e17111351de736aa9eaf
SSDEEP 12:rQQy8dp5BTGyl5aqykrKmfvuqJrBY1x/ircxp:rvy8dbBTGf7ku8vdJ6/iIL
TLSH
T1BD122B8A595818E04EA751FEF5E93AC329094C6633A8D0C83F7E2131C7845CE07D3B1D
MD5 SHA1 SHA512 SSDEEP TLSH

eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Chartophylaxes

Fugtdannelsernes/Eminencies154

Fugtdannelsernes/Tauropolos.geo

Fugtdannelsernes/Tvangens.uni

Fugtdannelsernes/dieselizations.bri

Fugtdannelsernes/francess.afb

Fugtdannelsernes/midriffs.ans

Fugtdannelsernes/svededraabernes.kab

Sharing

General

Malware Config

Signatures

File Explorer

eab27aeedf308a3d237f41dec18bf293caf228add0410a63b3fda8d57497aae8.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Chartophylaxes

Fugtdannelsernes/Eminencies154

Fugtdannelsernes/Tauropolos.geo

Fugtdannelsernes/Tvangens.uni

Fugtdannelsernes/dieselizations.bri

Fugtdannelsernes/francess.afb

Fugtdannelsernes/midriffs.ans

Fugtdannelsernes/svededraabernes.kab