3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe

3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe

IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
SHA256 3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c
MD5 34d72fc49349b9bfe03f2504b84bbb56
SHA1 293d42eb87b9f71cef073e1f88a0030ba6b2d5aa
SHA512 e6df70323727c87ddaa8209c94f90d9f71fcab6686439eb1c522add445793d746adba33aea4af5756ff217fdc2e858d9db20cb9da35efc5a9d19414dc8f92233
SSDEEP 6144:BbE/HUe3Y0VKlgggggggggoFJs7oz9GeKlz7QO6KVNqZLi6M3lEMANpW2N+2uE3w:BbcVKlgggggggggoFJs0afzPqZGzlUsx
TLSH
T1AE8412B435B0E551E8A10232E425EE3E1FB89D5ED4795E8B130CBFBDBAF1683A41D102
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

28:59:57:50:5e:f0:2d:32:c4:69:eb:4b:a8:b3:e5:d3:03:17:2d:96:e6:6c:07:d7:4d:c2:8b:bd:fc:a1:6f:17:d8:3d:53:2c:8e:ce:d8:6e:88:82:80:94:37:fc:11:6a

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Blufferen,OU=Recolour Meningism\ ,O=Blufferen,C=GB,1.2.840.113549.1.9.1=#0c2d466f72747261656e676e696e67736d656b616e69736d6572404e6f746174696f6e7374656b6e696b6b2e4c6961

Chains

Jul 24, 2026

CN=Blufferen,OU=Recolour Meningism\ ,O=Blufferen,C=GB,1.2.840.113549.1.9.1=#0c2d466f72747261656e676e696e67736d656b616e69736d6572404e6f746174696f6e7374656b6e696b6b2e4c6961

PE Signature issue

Digest

be:a2:d0:7f:1e:3e:5b:33:1d:bd:bd:87:7f:21:2e:d1:42:7e:0f:de:3c:6a:b9:27:38:b6:2d:67:11:39:2d:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Blufferen,OU=Recolour Meningism\ ,O=Blufferen,C=GB,1.2.840.113549.1.9.1=#0c2d466f72747261656e676e696e67736d656b616e69736d6572404e6f746174696f6e7374656b6e696b6b2e4c6961

Chains

Jul 24, 2026

CN=Blufferen,OU=Recolour Meningism\ ,O=Blufferen,C=GB,1.2.840.113549.1.9.1=#0c2d466f72747261656e676e696e67736d656b616e69736d6572404e6f746174696f6e7374656b6e696b6b2e4c6961

Minor OS version

0

Major OS version

4

Entry point

13613

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Stationspotentiometer/reskompagni.mid

SHA256 e384f09305e76f9917bc04d5706610abf57d4e5ffd702f4e80bb1968dff70360
MD5 e5f235a9924b2ca07ec33817d032108c
SHA1 c373ae2dbe9c7facb1bd42158a0743f8cbf42e38
SHA512 04cd0c634928876b4cbc10fccd6f3ed35d238c9783192edd4000f955a0bf2ead3f1e15d8e15b6ad272ec6009bee0626cb9b419c99c7ca0e6c2ca9eddc900428c
SSDEEP 3072:3CGMQeCCxmgdJfrJSyYxko39QlxseS5G6czXdu:B
TLSH
T122C4D132F6167643A2A65C608F51135576D7CC47E9C41D89BC3D786871824F823B6ECF
MD5 SHA1 SHA512 SSDEEP TLSH

Torskefiskeriets/Datamatisk.sto

SHA256 ca88b08aeaa9d857aa70322b19e268c388168cca085584817de37cab391b792d
MD5 f7771eb2c26f3b52cd1392135eb21258
SHA1 20ee3a7d9ea062bb54223f7d1a515e3bd5842d8d
SHA512 128f7e98df9e0364614a31de9f0f80821e952f02c6adc8c0d1e8bdbc0be4270841fb8b37070ce1dd956bf4ce8c0ff75f4061e43e89c0cce0d4ad7f47cdd5a23a
SSDEEP 96:zRVbdx2WEIQOeo9p08DTUIIHBxmSZ9/6BT1:TvbEPOLp0cT7IHBx39/6/
TLSH
T1E1933BDD38A451F2913831760C04FBF4189681B4EB519DE226742C4E58EFB16FE19574
MD5 SHA1 SHA512 SSDEEP TLSH

Torskefiskeriets/etatselevs.unt

SHA256 d003f717a896f4891b00e59a5ee0adbeb202438a5fd43206cfb4d3de7cf4a033
MD5 8c560e50a2503bba7bb93f29c1524f8c
SHA1 ccd6158b394ee1a61687079cfb1e07e3bc0ce14a
SHA512 5b24136f5b367e8be64180d9b78d796347ec3ab1cb540b8ffee2a4ebc05526c61ff00229805a41824512bbc83bdbb830c11a1d19810aa89cf61bb97ae0a3a11b
SSDEEP 1536:lMGdr+HELEtnKRYbROv7Y7HNNQ3e87sVkMUe6MQTSpp/xu1KIBMW:KGdriELE1bQsrQu8wkMUe6tmpppu/p
TLSH
T138E4D04236AD04A684D7FC53B58F5BB99493E22865A0D02DD80A8FF3B7DA8D91760373
MD5 SHA1 SHA512 SSDEEP TLSH

Torskefiskeriets/excellences.acc

SHA256 7ab1c732ea4a0dd577d905ee3d822f2c69103f7ef985e315514bf9228a5e893d
MD5 9670f171cd5fc40490ea522afe98c3b4
SHA1 1596a232e87417d7fdfa66e6cbbcfb55bb0e81e8
SHA512 565531e5d514a9369c63a357249f158d0d15bc10c5bb4ffd93b1de05ebf2c8f51175cf750802829790eb5e32e66f2055d18d8b314d3563a36e6180df0f2acaa8
SSDEEP 384:L7ojMBX1Qq53YXADz6BHpdgH+A+UjFdDBWjjUygfxYSR95ps0eBHGGqblAADHhgq:LGMZ15lYQ2BXAS/UXpGHG1buADCq
TLSH
T18774C03B933EF5147052274B6403B30A52D38E4D7457877B8F96AB50F63E907359261E
MD5 SHA1 SHA512 SSDEEP TLSH

Torskefiskeriets/milles.bhu

SHA256 57df03d67de6bdf847d5a7367c39fc53192f675884a327d716cc31ef2650bf2a
MD5 0ceac353195aa17086b64a06e5dab6c5
SHA1 e1e4b4ad9aaef92b0fa8f9063b1043a074e4b3ec
SHA512 7c34dad8657541e7be023e884b94c700002b18ee167be441eb5a5f04721c79bd7ce2cd55db000f78cde5fdad073eaab8db18fbf57199e3ce06a0f531608b422d
SSDEEP 48:lEt1/IcGdwqEkvy5yPi4LIWHi2lSpu2s/dDoYllzv:lEtLGdwqrK5yPi4L68S6/OYllT
TLSH
T13823C6D19D2D34A2223F74D1F1B8E8430DD2033D1867FB0607E25BD3580D72958069DC
MD5 SHA1 SHA512 SSDEEP TLSH

torsteinn/Artists.ser

SHA256 6fe8552b839d9135e93542b7b4eedfadf350de3123c58aa1215ef544b2ee87ba
MD5 81c39354b66486ff4c9f2d008dc93353
SHA1 53cb6c34d2111d4c59086b463ac39819c4aa7540
SHA512 66d451b944e311e5f25e69245669a2ec9f64a25432170d5ec59eaf2fa05bb5a76b1a2aa092eb71bbf9c0e787e72765fb89d310d996791606887cde1161c76d85
SSDEEP 768:VgXdLqQ4COjT7vZFQ4BD2VjJDlo0uRA26PVXT:DA
TLSH
T19AD4DFFB1A61A0A1D4DA2C02CF8344D120F9746E4CDE46B9D35A768067E52683C23E3B
MD5 SHA1 SHA512 SSDEEP TLSH

torsteinn/Recoaled86

SHA256 1a5707c9f0f53c6210094e5beee2788b315bcad84bfe1d105aa58ff0e6deb680
MD5 dbfcf6b3bc2e5910c02899b1406d2ccd
SHA1 bc3e89008749c40b14ae082cb8f65116fcdee229
SHA512 5ec9a3751f16185af2a5c7136f7392c011a1e45b642897dcd6250d56081d2070c8aef8e2314affbbe0256fec411590b548ba99c22e66bbbfe22babe5dfb81fde
SSDEEP 1536:So5BT8DroZaXaO3wpOC44baMJcP51Ab+NA:V5moZaXaO3jfDP4+q
TLSH
T11243BF51DB518CFFC907D53CC8ED62A58D687026DB0FD0AC727AE814C14B2E76724A3A
MD5 SHA1 SHA512 SSDEEP TLSH

torsteinn/Skeletteringens62

SHA256 4782284af3edbbf5e5562d397a02de14eb19f990095df95abce8e206bf812df1
MD5 6d677d73d8fdde80a0d2291517ccc7b4
SHA1 e1bc74351ad6b1ad8bc4cc1ea45f45d8ae0377fc
SHA512 ca4f14e041efa748ccfee67064d826d9a21dca287d633a927b27972e1d862117790afc30880e2ba0d4c65e84466a42f4a9100c8be17fde2ac71feb424c8cb30d
SSDEEP 3072:0gGnWC4/J0SxAyf2WhPeZn0Mxvh6XZkuqPkb3WKZXBrAb39nxXh4cUArB54LgdWU:0U+kTfZG6yuWClZXBUbxUu389ttoL
TLSH
T1EE24F1356125370ECB822872F51A542EEEF63CCBFD802997F0A59B5B1D319E194892F2
MD5 SHA1 SHA512 SSDEEP TLSH

3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Stationspotentiometer/reskompagni.mid

Torskefiskeriets/Datamatisk.sto

Torskefiskeriets/etatselevs.unt

Torskefiskeriets/excellences.acc

Torskefiskeriets/milles.bhu

torsteinn/Artists.ser

torsteinn/Recoaled86

torsteinn/Skeletteringens62

Sharing

General

Malware Config

Signatures

File Explorer

3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Stationspotentiometer/reskompagni.mid

Torskefiskeriets/Datamatisk.sto

Torskefiskeriets/etatselevs.unt

Torskefiskeriets/excellences.acc

Torskefiskeriets/milles.bhu

torsteinn/Artists.ser

torsteinn/Recoaled86

torsteinn/Skeletteringens62