5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3.exe

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3.exe

IMPHASH 9a16e282eba7cc710070c0586c947693
SHA256 5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3
MD5 cc4fb917fe90ef34c9dcf83a2cde79b6
SHA1 246040d62d917037865d3576fa71081d44448d89
SHA512 edb738ab7e0a5b16b4c6b2444053b3aefe66dec077a5deab90468a0ec20c56c8034e7900332338a4fdfe5e174436bd0758e11e9b46a84d98eaa11087d582f0b8
SSDEEP 24576:zA7FRBJNy4YDnYYlMeBEFmNZpJGSqQc3DKtbPik+k:zKwNnYYrDHVSKtTik+k
TLSH
T14F152369F334431FD866D371C87A4750CBBCAD58754AA20F7349B2A53CA32DA46203EE
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

63:e7:b3:27:d7:64:d5:22:c4:a3:6c:45:fd:42:6a:f0:78:c6:14:ee:45:1f:02:f7:d3:b7:b1:dc:a8:c0:d7:2b:c8:98:27:68:27:07:b8:dd:74:ea:8b:fe:64:b3:56:b6

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Badebukser,OU=Modernistens Opserverende\ ,O=Badebukser,C=FR,1.2.840.113549.1.9.1=#0c1a4675726e696d656e744046657272697469736174696f6e2e486a

Chains

Jul 24, 2026

CN=Badebukser,OU=Modernistens Opserverende\ ,O=Badebukser,C=FR,1.2.840.113549.1.9.1=#0c1a4675726e696d656e744046657272697469736174696f6e2e486a

PE Signature issue

Digest

36:36:44:2a:59:cf:b7:b0:c2:0c:9a:be:29:0c:e5:59:84:f0:f6:84:85:bc:7f:ca:27:14:3a:0e:0e:68:a4:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Badebukser,OU=Modernistens Opserverende\ ,O=Badebukser,C=FR,1.2.840.113549.1.9.1=#0c1a4675726e696d656e744046657272697469736174696f6e2e486a

Chains

Jul 24, 2026

CN=Badebukser,OU=Modernistens Opserverende\ ,O=Badebukser,C=FR,1.2.840.113549.1.9.1=#0c1a4675726e696d656e744046657272697469736174696f6e2e486a

Minor OS version

0

Major OS version

4

Entry point

13331

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueA RegEnumKeyA RegQueryValueExA RegSetValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegOpenKeyExA RegCreateKeyExA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteExA

ole32

OleUninitialize OleInitialize IIDFromString CoCreateInstance CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

SetDlgItemTextA GetSystemMetrics CreatePopupMenu AppendMenuA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcA GetMessagePos CheckDlgButton LoadCursorA SetCursor GetSysColor SetWindowPos GetWindowLongA IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetDlgItemTextA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint MessageBoxIndirectA CharPrevA PeekMessageA GetClassInfoA DispatchMessageA TrackPopupMenu

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor

kernel32

CreateFileA GetTempFileNameA ReadFile RemoveDirectoryA CreateProcessA CreateDirectoryA CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersionExA lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA SetEnvironmentVariableA WriteFile CopyFileA GetCurrentProcess GetModuleFileNameA GetLastError GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc GetModuleHandleA LoadLibraryExA FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA MulDiv lstrcpyA MoveFileExA lstrcatA WideCharToMultiByte GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/System.dll

IMPHASH 240ca92ecc1c291801c451c447e16c12
SHA256 a44ca08afb3f6bafd76aa35c259f3d599fe34f6f49ea5118626c1c1a540b0f03
MD5 81e268e27dbbcadbf116b5a9402195ab
SHA1 bd2b701b2e5e279786e179bceee2dc132a2afc37
SHA512 784115c69df4a6f180efb4d48cf5c6e8c2393b8ce9aa664f192abf5a260984880c668dd0f93564126d2fc718130570c4f6224d1373d73bcb8343f04f6ede25de
SSDEEP 192:VFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/d93:97pJp48F2exrg5F/d
TLSH
T10C424B1583618EF3F5961E3C00667E2F2B79BE3416F104A39FE34481AD9A1CF99B5392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10673

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Blikkenslagermester/Bak/leaviest.jpg

SHA256 a2fb08a672a0ae940793b798c6b21fdf78aaecebc0067d97527ed1593aac9ba5
MD5 bb4de54fe7bbcce50aa30de987cc4943
SHA1 dd9aa7069c13c843cdb17c8b65a3ee6754f3e191
SHA512 d6d68c6e5555b8c4dc20b5e39cdbf93abd35c994d5627ee3b3370383d85d36333ab5510fe8d7a01b1fa691f89d833f907cbf73cd4b176523475c42d03ac8b3e3
SSDEEP 768:l/o8yIXutTknOtu8hIZWQUynCBi2F8FP8SiycXVImTh:l/5z+dpt9oWQUzBVF8vitXNTh
TLSH
T124C2D10FF6071824BF0350CAB5342DC71C60DF56F6AB9270474599928DE9CB94BA7C9E
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Blikkenslagermester/Bak/lepa.txt

SHA256 136bbd7bbe4ef88cf4c2887d6dd567b5dbd7bcf15ec8e943797ee64117bb628c
MD5 5d6a9d65309e97273ab6b202bac11dc1
SHA1 52ab08d1e07123a52525e316338c28c7db744575
SHA512 4b39f01b65cf681065f93741d71eca66f483e9dbe8e9fbb147b8701036973585a903ba04551db92c2f49bb90314046c35563c5d4d171a1a12f039bb317cfee07
TLSH
T1BFF07561E85412D756132347E8920F054CD4E03D4137A0B4C0D8220E638681D83A589F
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Blikkenslagermester/Bak/mallorcinernes.jpg

SHA256 6bfc95e4e5815a73c86df6990317ecad7b2cb6b406af63d88ccc325542cdc594
MD5 c5367038f0e55019103d2f2a5941fe68
SHA1 d16185f48f35ff3ac5833f9fb0c57620e769aa6e
SHA512 d24d2c21c0bc20021772ab3e5013ce7183f554d5511c9081c90e875094abd9566e844568e4631f1badccb4e4688c062ab10a5f2fabc0da3c78c8acb145c11d01
TLSH
T1F7518D6FEF50E2024F5608F5154C3A4358038AA039F07A780970A549CBE0D7CAA5BEAE
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Blikkenslagermester/bvet.jpg

SHA256 a40a42d1985b51d40057eee2d516823f2c6f7cd71043496746bdb992cb874d66
MD5 42ffeb8dafaa6b626b1ff1fcaf7cac7e
SHA1 fa478c009836b63b18420cf87c3919181e7087eb
SHA512 ab63432f9a43d249c74c30dd1642039ad745bc7c8f2e72d0297ac748e94085ed75f00d81bc464cf9c6564f40ede8514934b29fe7694e28978ab793c95bae2545
SSDEEP 384:5lGXV3cJHLCsisJZRXNjBVlemaE5yCtructQliB3KISHHl7335:5IXC1Lt5x3CYyCMctSiW55
TLSH
T1C172D0CBD1F593356F44289BCA8A862BC505766F7FDA123A0380425AE1C5E7A4FD83CC
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Blikkenslagermester/differentiabiliteten.ini

SHA256 bc4e11da0dc000e6d6a035522bc5d137bcd615f1c6214886f2fc9bd99bd91a83
MD5 e339cd641fd1dbe2a624024dd2a268ee
SHA1 74d9b32fe5e52eafc94e70ac1af1c5781252e644
SHA512 daaa14c8e2c2eefa2e040308c0c0e3141c137a6eb266561e293fd53bb68b7642a80a0f3150c39bf05e6a42ebbe3010d503e47998606ad3aaa9a75e2d1cc0fe4e
TLSH
T1CED0A71CC3865A030F694E948CC24AC3964A48749B4624BCB16E437D7928A34C5F8A0E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Bundtningerne.txt

SHA256 528c6c3235fc148a18c72ccfd4e44a5ee62b53ec0de8fe172946cf6128725d50
MD5 6d89344337e1dbb22c03f75471da2fb2
SHA1 80bcfad4bfbfcaed77bfbf4685b75f20c7edd9b7
SHA512 2f8cfe3ce041f25e60ca563a1a833a9ce512b4bc402ccfb7ba396bb42cdcaa034562e1f4e4c0c3bcd6318a7abf756aa1d13dc6e982890a9a4cc1cace4bd3078e
TLSH
T142E0F18BF052364DCF4F49B1F59509BB06AD0088D70E0710111FAC0EE562629113711D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Controversially240.txt

SHA256 dc9f8f9c1307ab701922217ee2738ab85b7189bd59d84390891a8f6c24ddd05f
MD5 d36263173f15a3313a99fb4f1068e0c6
SHA1 1cece399949af5f8c88f370b4e25ba1752b8c310
SHA512 80627edd68ff4df83837c752ed7f64fcb19361fd823378e53a8d4e5a05dd0a298afc076d8f0c3e18d715105088ca892b212e33ac287c616da1e0b63826231329
TLSH
T1CAE02B9AFD68792501C24FFCAC938A4804D8D5422B3B120FE0CF436CA7326CD9320248
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Egenses.jpg

SHA256 ea9382aa8777538c7f6bd79540ac93a0109839ba9ee9d5a03fe0dd55c28a3184
MD5 f2ff221ffc0d415c336628526dccb7d9
SHA1 a878667ec88e06d5edc0b73dc8e13c79b45fdc67
SHA512 9569a7e1444b0a71a1f56702d29d864695816b7301b5b61048d0e2e95a592d14f205daa131d74616266d72cd760946b8c58d140e971dda51762547f46b6f8ebb
SSDEEP 384:EjUHvZNaEqRmtchfyP8AKNynJOOMsVb2VZm/7z0ov0sBWmV4zme4Aprp:EjUPWEqRvhfXUJqaAckocTmV4qeFt
TLSH
T1BAA2E1AA370D69A0AF7212B82FCC63B8E68C47B85251ECBD153557E3F348D76C8456A0
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Gambierens171

SHA256 23b74993d49b2cea69cf45d95e5c7d29ba585b57f2c52deebe700581ab48dfc2
MD5 130d8d23b1196b5a1d8d87a8c6f7b1c4
SHA1 3df3631e6912f369d5cddcca2e5df7157c081004
SHA512 bda412827ff2093f3e18ffb134fbf2b8c5ba279236a8eb25536922c61404c9c51ed2954ec9611d033d86222a5388a8f1a549b6b9e25331dd048f2128ff65007b
SSDEEP 6144:p/OqYVNXla1i9w48NEeV03wEo312F1BUaN4n:p/Oq+a1zG3G2xHqn
TLSH
T15A24F10398EE6004D62BC570DFFFAA3D818A3D849585DA6734D583279A21FF87261CBD
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Mnttelefoner41.jpg

SHA256 aff48351891c99bfc9e145d0a13d4a0e56a9976adc657cde0937942620501cdf
MD5 40e1f9a46b0ecad0efa46150547938bc
SHA1 1ea39d1dd2accf14a3dd0d75e61040ea81626e9e
SHA512 d3339ee47a5418f01133112b4a600bf1832d63ac5acd998ae4cd88991358b742365b2a4322a6c0fa29149e29ed8e68c7eb5a6b0ff904bda9194d92eca86962cf
SSDEEP 3072:jlihS7kOztKtzWCRbRxv3XnDY5h9R6ckg:jEGK8CRfTM9r
TLSH
T15AA312A04970B2330D5666E6DC4338A2D5AE3E08C56C93EE915E6EE23DB35B39114DF2
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Perfusion

SHA256 a3622ccd6cbe55893aa637567725407c872a9fef20a6cafcfd936b1e7b4181bf
MD5 c1a8a69e5e6f47aa9e68ce415dabdbe1
SHA1 88b084a9f410911af5caeb88d0719e340fddde22
SHA512 a05990cb4efd8273b221bd88cad8526768be5e5e6eff2d6c0dde44ae0cc9a8580aa8b6fce86daa749b5a610eb6a08901db53c1e464245ab625f8e0f2e8e4e12b
SSDEEP 768:0DLHC3q7XSKKAJlyOm3sIoL8eEYdWyc8hjK3IiBfkWHRGaDxlg:827I7mcLLWycCK5BrGaDxC
TLSH
T17D13AF52DB66CC77CD0AC630D45E34AB8918B052EB8F94DE2279E438C11B2D69614BEE
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Revolverbnkes.ini

SHA256 fe643cb2a1d64d92b6f7fef19f953df9895c3d61df16ee7cfbdeec4a359fba97
MD5 2436e96a9d9c08bde961fa2bd1c99822
SHA1 7a4a8a5b0b5855eecc152b2bca2dcb3a8bf7737f
SHA512 7270aef734da1885f158df8a46570bfb2845b014c366d78ec2a0196270418606143c8d44b296f21cdc461f0dba73cec267b744fd06627b64c878f98582bf6630
TLSH
T116F005CBE86895278B07C358FDC05BC1B23AF38A150438CD96D106254D42DD9C37E62A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

Rundmundene.jpg

SHA256 47b9500d075fd8fda4f69a84e96895671c5a07ebcc866c89dd6cbf889adddebb
MD5 192aa46abf46fae3d1a28eb5195d70cb
SHA1 9bd3d7921a7289c86d43a6ad312ffcf5dec01967
SHA512 d2a7d115aee9ebd262feac068838499a7e753449335684b608325b13a8ca373107a244eb2bc743ea82dda55e1d509c37876a578a65ce388a7aea34bb4a25119c
SSDEEP 768:MGD5jvBJ+Y4LZiB0aoo6/Uvchx145a1mbpIxengMed1KAYC9EO8eodZO:MGD7Juoau6cvWcvbKxJM89YC9EO8nTO
TLSH
T18513F16D78682954E7C514BE48894818343846B07F2AE4DFE13F70ED6A48FF5EEC0078
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sovseskeens/thetch.und

SHA256 ee8a49c485efd1fd35b7041274f634fe7eb738f4fd242ac04dd50bee0b216113
MD5 9c4b25e49e51a4bf948dc2c1f7a7e8c6
SHA1 2ddefba6365f5b720fb1cb367b91e310716a6a5c
SHA512 7099a4d5d02c6e46c37dd9e434e9caa912abddb8207ac7173985d144d0077cbcc94d3e3952d0cfc4e88a1bcfe5d955b193db2f52aae42c44420c9c2039761cd5
SSDEEP 384:G3PZRywigU0iwuV0scD6L+NNdvLtBUJE7APTJQuMj1Ef5GuHevnvk/HHNQrt7Mt3:iaiTr8iyN/lYe
TLSH
T1BA76233787094283EA21555B3D8E83EDC3E57EF6A6098D231EC5FA8BE5595313F2102E
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Uncensurableness.ini

SHA256 a801cf7932700f3288b81ae24026793cef5866d0d2140cd0950e4cb2baaf6133
MD5 13c0d0915a35a420c01932bdc149cbe5
SHA1 27322cd4bdb0a85e6bced4f4d5721d188f134710
SHA512 030f851eba7b230e57cffce203e2791856c205ce4b54668ceb135af27563e0aad6676bf5dee150dc2bf15ea9f6d08da3a14db402305ac2e0d2a10c172390a03a
TLSH
T130F002B1CEA0161C1CB11F41AD15A1F657BF552E4223A02A895F139D22824CCA59BD9D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

adventive.ini

SHA256 3a9f1ffc91c29bd9e5211d72dcfd73e82ece3c2d91876323fb83d89123205970
MD5 b7b1048d8483d7c0d04d490b39b1d56a
SHA1 6fa0f1e031597a609a727f33c37b480aad72cc8d
SHA512 38bac7f272ca4e09b56b44d0c213991156903a86f4dc795317d3f31802220182e9184fc16f40aaa3305041bca251c4ca18a0d9bc40d2fcfe016adfc8b3df4ee8
TLSH
T115F00254ED92B7272E835FCF79A0C61ED9CE09402936427894870F7D99811C4CAF963A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

anabolic.txt

SHA256 9a5de342b70ef39baff507f2bb601bad76afb6cc88d5d34a67f85e4d4e752d6e
MD5 ca0f24ffca299549f7eefbd14c0014a8
SHA1 b9bf355ce5e33012567d88840a2a597cbcaa65ad
SHA512 c114674770308aaed229780827ca6da453b01e0e7f93a07063fd01d324cc9b5ddf77f9ea84dab1b84ff77b34260bc0d4c998665712faee3205b118ff4a97dd5e
TLSH
T158E0F1500A3B601E87136881E4920F00C55EC754D00CD17C73D443FCB452C9CE34E51E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

balletomane.ini

SHA256 a50d99abaa72cda75af9afebefb3b8c04d912ec0681f021374a312de398290e2
MD5 753e4318810d2d2d4cf74456eb474bd8
SHA1 5f928ab942b8a23ed2beec2877666a0fe320ee6b
SHA512 a8783122562972498790713e641d4c46b6f812041827c85801dd9a28782bed946bfeab90837bd50b4eccc73bb97d6f6cb4281a29cf590b0b633a622d185f8aa9
TLSH
T122E0F159F99131247F573B31E5BA2CE394B7C34B23020864926023D51413D23917B61A
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

bushelful.ini

SHA256 3ef9cbcfc7a4a4c16731eb3a71cf641590da16a88fe08206c33ff64df75f5e0d
MD5 2e766619c9c5ff82942fa5b916919f46
SHA1 1a4b4da56a3c94ef75ea0f97ea8f092a0a8015c2
SHA512 6c3d244586eaf748bfb75e7e2c91715a71dce624ffcdeffa2a7c9d6d4688026a3874d8b20bbed374a2adcb7b583e1ba282ed581fcca0ba80e7b806c10fe82568
TLSH
T176E0F131096978494E835B0C3C012C9899575B625C6A63723BF9413D331741DF3F8459
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Blikkenslagermester/Bak/leaviest.jpg

Blikkenslagermester/Bak/lepa.txt

Blikkenslagermester/Bak/mallorcinernes.jpg

Blikkenslagermester/bvet.jpg

Blikkenslagermester/differentiabiliteten.ini

Bundtningerne.txt

Controversially240.txt

Egenses.jpg

Gambierens171

Mnttelefoner41.jpg

Perfusion

Revolverbnkes.ini

Rundmundene.jpg

Sovseskeens/thetch.und

Uncensurableness.ini

adventive.ini

anabolic.txt

balletomane.ini

bushelful.ini

Sharing

General

Malware Config

Signatures

File Explorer

5a891a660cb8f45d18db11af1a25a332d615443781ad7915ebf92c6919a88ad3.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Blikkenslagermester/Bak/leaviest.jpg

Blikkenslagermester/Bak/lepa.txt

Blikkenslagermester/Bak/mallorcinernes.jpg

Blikkenslagermester/bvet.jpg

Blikkenslagermester/differentiabiliteten.ini

Bundtningerne.txt

Controversially240.txt

Egenses.jpg

Gambierens171

Mnttelefoner41.jpg

Perfusion

Revolverbnkes.ini

Rundmundene.jpg

Sovseskeens/thetch.und

Uncensurableness.ini

adventive.ini

anabolic.txt

balletomane.ini

bushelful.ini