0ec8881736114b83e3282ac546703a0a2f9d2a00d532e2a501e8c33437252f27[.]exe

resource
0ec8881736114b83e3282ac546703a0a2f9d2a00d532e2a501e8c33437252f27.exe

0ec8881736114b83e3282ac546703a0a2f9d2a00d532e2a501e8c33437252f27.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 0ec8881736114b83e3282ac546703a0a2f9d2a00d532e2a501e8c33437252f27
MD5 81e4e8805aca09cd540e35bcead0490b
SHA1 5a9d015e967928b538b89e005696704e0037b3d7
SHA512 86490d78db736c6111248ded0accd3137b58dba7481ef3fa8b521e6aa47d01873c2c9997a722e66f216b452c7bde6c200646cf37c775df7f60e9f16e539f2104
SSDEEP 12288:p+YuI6AoRmBWiXgqHuJ/DYgDUHb0RiM+iMsdGqxGUyoNWkdqs86UBttgGO9UBQly:p+Yzls+LHZgY7K5VMsXYeldd86E3HO9s
TLSH
T150E42312E364D937E3BA6130056ECD3222A1BF2D52F84A1747B9B31ABDFBD50D486247
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

Caoutchouc.Unp

SHA256 144ca70bdfab8abe347591eb3e32f2c13e23eaf87a0a668f89c82c782a558609
MD5 fefc6fc1ed5343a603c9c155d84322d5
SHA1 3633a055beef017dfcc5e091ef8dc39200390082
SHA512 0ad60cec35317898ab9a561e1d33b8fda26dbee1e6065189393853f620b74760f74062dc23da8f41bb9758ff05f165f8eb93f96e8f2359976c7175b73c730a99
SSDEEP 1536:+VwIaBdOh1GjCtik63Xz4yoTrmFuInFzKo69JUoZTuFjNeS:fII4hQjCtik60PmAUFM9l65
TLSH
T12543E161AB29030C5EC1138ECB4258691F35497DE4BA88E2E57F327B314345D6CF9BBA
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/Venders.ini

SHA256 64154644addda1b55540ba85cb1633309218bc109826b545b0d0794c2a8be81d
MD5 f7997d80cbc169f419cac95338188261
SHA1 cd741f03a87b3ae44a6b2fda81918a2cd47fe170
SHA512 81b6428b918f0ab98697035d0c0f83e1b0ccfcdf8c949360b295ffa74195efd186311ce33662a0cf77e78d2f81e680b4c051be009838329f3c8321f27990afb3
TLSH
T111C02B4D00837C2CCF0421A8F0000EF500A8140CAD3C91E87C8D4F0D42450B9C0DE45E
MD5 SHA1 SHA512 TLSH

Filmmanuskript/adgangskursus.txt

SHA256 05bfb8ae5607ce3b6105e4feaff97c0ebbe5a548ff6c211d942f060fccce779c
MD5 14b93f6e130fbcb0043eb3bb23339353
SHA1 2c2b9b0c74005d49b5be8fe6ed4433e93683e8a5
SHA512 5d078f543d8512a106f7039f755b6031f508152b2875a9bfbb8a34bf7d0e0d686b4bdfb8ab4e4f82d4eb91aaaa2be7e1d89ea21a7c438c08ac5e6e435e0d4525
TLSH
T1B5C08CBD955748295942830DA038FEC3A8B94A10B0237EC970EF02D6A07618223AF1EF
MD5 SHA1 SHA512 TLSH

Filmmanuskript/aktricen.jpg

SHA256 d89595a32b165c2e96505f72dfd6253e6973befb5f3924c075dbe2d4c68aaca7
MD5 0ee33ab05398c1b45e2fad80cb9b31ae
SHA1 dc2092fcbc949d0c0fbe8009adbda0aa40f892b4
SHA512 8c19194126074fb7b253a4b692d36217bb80f4050ac8528b9c4fa543d3e49832135b88af6c0272b1faf9aa72af3f025597fa55bf582a7e0c65a416b65e1d641a
SSDEEP 96:RhBExTdvOEbabLwpMhnNId2INx/RbQe1kZUxhSIENJ9olmMVZZXODg1c9v62OHRc:LBaTdGEba49HRpbtxgjM9yg1cY2CcIno
TLSH
T115029E5D2891A5E5EBD5D9E03A627662360794C637D4E3BC5CF71836E0D2FB44561030
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/autotroph.jpg

SHA256 cfc3aa60a369bbf8e140669b1436ee62857601096b65e6fa95d5a0d4cf2d0504
MD5 359af29c5eaa679e327fd0cac653e56e
SHA1 5a91cdd308326f6494fd531e023ed6ed6fd9ff3a
SHA512 3d6b10e39251aa511473f74e65084b6a3a238c0533321cbfac55d1843e7acd1a34dd74019ead330ddc45a2bb1aaf06bf5d554d3c7706ff9d65787e6d460780c0
TLSH
T16A511A5A5D4739C4EF26A5A6A5A13600E1C16ACB3D847FF118A04364CA60CF4D6CD11D
MD5 SHA1 SHA512 TLSH

Filmmanuskript/bandageret.bor

SHA256 500bf01fea5dbf35371885bdea2a6e9579e8e4339bd8ed77301f9545f5ecdfc0
MD5 294a69f282efa8bc9c2290d3bb1c8575
SHA1 6318f7053678382e169de6b9bfe534858d83dfd4
SHA512 b2ba173f33a7127a1f241710fef7e677e455cb9a808762aef74641ea6c3ff0933c6bf6198b6a111f2482ec23157b9abe3aa1b509372b2fd6e71633e3973692bb
SSDEEP 192:7OaSKjsgoKOSGSRv8FPVe643sgAZ7I/Uns5AWIJMdWuY/f1p3/QyG/Q2RhzM9b6g:SHgFIt6sfLnsKqd5MfY42R9+byPTMv
TLSH
T1F074B041DC5FE2164E97637EC1EB2CDAF41A600502A7FC3ED880B9059A417141AFBD7D
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/derivativers.ini

SHA256 ee7c207d352343e0db2a812753536151b7cc190739a0fb064824fc35c822be10
MD5 62132268819a4d4dfb0d3818480ab94b
SHA1 05952fe1061efe21dd3e5c15fa91698b46f2be49
SHA512 e5d13ff8a8c52cd039fbb5ab5023dafbf4fd03b493c501194e148f34000968ef5a01e02ed5c899ef315a5fa4736423209134bd71a1245d8850199627add21f60
TLSH
T16CE026A8B383A2A64E657581BA62840A53AB6808E08423C8325ABB1CB8005CD825520D
MD5 SHA1 SHA512 TLSH

Filmmanuskript/fainest.jpg

SHA256 289a5ddc6d012c1e95805a8522f1c2ebfe9258772a3c0ab8dd24fe9a9773c250
MD5 d47233759e3409802a5c04351ea23d78
SHA1 c1120f45ccf47133fedf87e8575c7cc33ec06719
SHA512 d36f14496507e6337ee087c01049d874729509f5ec5c5b9972f358fceb985e3650f17acb3c75817a434b812fb784779c6d8cacde961e8bc1b76162d8a88f0c34
SSDEEP 1536:FdwO57FspksOzPC3ICQ8emU4EJ4sZdbIh/Jck:3Ipw63ICQGsZ+R
TLSH
T1DA33F266AEFAFA06EFA65A5698CC1C55F147361017D0023B2EEDE07ED05CE2802E173D
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/forandringsuvillig.bur

SHA256 fed7c60b0d65a7aec6fce59f6745966ddd321a794e37fbf050e59e127e92d92d
MD5 b26afd3e29e9019dc82376007c47ba26
SHA1 5f457817fae57de51b1b45e204637f1ba1ee71a3
SHA512 5603bb103bf5f8bf63066b536f891a491ae38c69f74405dc6b49d4242864e59380655389aa9e61ccbb11ff80b646c79497474399d30a8e2dc3bc18e827cfe61e
SSDEEP 384:sL4aPXrE3D7RO4j4bImV2Iuf4RptvpQUZKWe8kWly/d:U5XrE3D7RO4+hf04RpNpQz5UOd
TLSH
T1E7549ED1E79B199709B18E97A021AE20A50F6BBF681F60FD7599901E333B5711C19C4C
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/schizoneura.jpg

SHA256 9bc6dada9f97940609d8048053978b606a48ea063399b9c9843bccd32518304d
MD5 e0542e2c1adcd5504414b1025edcbfe4
SHA1 14fc6e4faa16518bd347ecff3a27bc2f53b76902
SHA512 3b4088430278a4bca5793f3450f230ded7d8f28e0f055a76895562f3bd1bfc1ffd6ef9f936820d12b4d98e39751504435de4b31617cc3934a3e3c94b12206b86
SSDEEP 1536:MRyrQqXtUfOX7kV2NqYytQOcv+MWntMMzj+D0jGS3NIsPI1vE6lU4TBC9tsRRCWG:Ay0waNVKqYy+Ocvantx+ACS3NIb1vEUW
TLSH
T121A31269DB91E3F0931AE2CCF682A17A4A90E7F2D2A25D157C75071318DEC351DCB2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/uddata.jpg

SHA256 71cb6eec63fefcb51ebfdf1bad1ce83012cc4444afdba9831a42fb837921910f
MD5 b2340a3ae2755cc0af496d50d5a1cdfb
SHA1 c43e858c5da51b0046e14100f43916545311e54b
SHA512 30a6e771dd8780194c36c9f3684a664ba93b0cffea62cd290c5b95ea6ea4d28ac2ee7bc7903b51a58f3ce40f5f66a8d2a1f64755485540fe455de6753db0d8d6
SSDEEP 1536:WHw2ntOu9ykaOsUeD7tfbBVKkhnHTAl7SF+ngtR:ItntTykaOsvs0zQ74+gtR
TLSH
T1A743F187A55E51236F4E811E4B0CC2E001A9F53EAD6ED6365E208314B7E5DF9CBE4C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Filmmanuskript/unfutile.paa

SHA256 8fb3d703ddbe568b53b4abcb3d70364c67338a236312a4848395338342a3decb
MD5 8935be90e3268be9f95362319c530686
SHA1 c8f56a3c44bc43aa8c24c9059c7d18c6a4ae7275
SHA512 434b9e0146c0078c4a5c26b2d4c2390ca2c13b574d79b6fef722d1449d695d7915c93ec3f620a179498407403041be479ec515c70575f49cd378a3b7295e04f7
SSDEEP 192:4aAopfjIHIPvuGiIjcdTcMrsbgI3fzaionEo1HQ3:4nyrIZMY1cMr5I3fzzonZ9Q3
TLSH
T175E39EA687B88E1EF1149E709F4E4D8A766CBBD4D53029C9FF10C0988517F03609741B
MD5 SHA1 SHA512 SSDEEP TLSH

Genrebestemmelser.Bru

SHA256 bbb57bb23fa445907ea952c8652415663165be7acc7a605418b20ab728540bff
MD5 e693110b02ab3e0b495007f6d103be3c
SHA1 9a0ef2e3af0a630ee8b09631b40ccd212df221e2
SHA512 f297a0951dc112eed980f4c4cf086fcbb91c8652e4a059afcefff52190632b4d7f367fc328d236e5ea342172f82cb50b60fdbab0ffd7705424945982e2e15a8b
SSDEEP 6144:qierZGPpLfZQSV4ZdFJhOIBsityYbq6TJJ72RZWLLiqVUWTUK4Pp/vRv74+NF7Ze:cURRoFnOp0Tz7OZWLVCWTChV4+Nne
TLSH
T1F0A4F19F14828BE6C5225BF3F5561530065AD30FEE5AAE52352C3F40D46E05FBE32A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Lektoraternes.txt

SHA256 1e91c464da6733c5d20a654ae03a092c155ff5f9a71bec7567e9bdc735baeada
MD5 125f6bfc2202e957e502e388f1d9f225
SHA1 d53010599b232754db9e0094616a445217bb26d2
SHA512 21b978052a1fde7e0bb69e7e679b7b9180eb77af795052e896d545d017e59fb02afd7c167f76689da58c6db6b65db2ea797433d7940ffa083f8383bb19b77957
TLSH
T1E9C02BF72765BA93C8520424957B00640C788020727EB8A04C22911F1D8C510D15CD62
MD5 SHA1 SHA512 TLSH

Stblokken.ere

SHA256 0c0f38f0ba6a45fd69f52b73c668563882f9682402a91f64dcc875a8ce253f14
MD5 005f757d5bf5b344cbedea9bff47c73e
SHA1 42b77dbf4389bad0cc22a31508356e7865167106
SHA512 f07602dd82d5e1dc8a8494df0e5939a68661597a7a6c6b19682eff604f84c3907e0386b1741fd3dc16f7d8b113e1d29305c421926a14c9375925456c9ce6b424
SSDEEP 384:h361e5fNodeV5u6GvZdOd0zPCc9S7mNooIqNs0Tru5q59gikaP:f1Me1GBC0zPCc9/UtaP
TLSH
T1E294B0ACE3C168DB55098ED3068BD93CC992F86C55074C9E2B1D6B26513F55B3BA043A
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer