b6c3a2df9bcf837ab920f3ab472a0e4222414bc289537a8edbc3d8614ffb4082[.]exe

resource
b6c3a2df9bcf837ab920f3ab472a0e4222414bc289537a8edbc3d8614ffb4082.exe

b6c3a2df9bcf837ab920f3ab472a0e4222414bc289537a8edbc3d8614ffb4082.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 b6c3a2df9bcf837ab920f3ab472a0e4222414bc289537a8edbc3d8614ffb4082
MD5 bfc994640c8dadf49119efe7896236e0
SHA1 2061d6a7d2842ba2cfc05d48b1bb0237092bd7bc
SHA512 46b9c5d514795d395f06bd231844c98fdd3cda39c2e2da3c0c3eb060461df105a7531b9ab6b6ca849ee9023c1bd3cfa03d27ba8fe6df1c096a58d0c166fedc3b
SSDEEP 24576:PXEa27+8nlkn6qCid8nCyjujScvHnGPV7Ia8BP0ZR:vEKn4M8nCypcvG97IaW8ZR
TLSH
T11F4523137A6DD193E0BE17BA59B8A726E7A4BD101D474B8B23147F8FE530240BE06793
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

12:45:af:50:ae:4e:a9:e1:3d:38:a0:7c:a8:6a:e4:15:51:72:d9:ea:53:7e:cf:a1:13:3a:1d:7b:08:45:8b:1c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Gantang,L=Saint-Quentin,ST=Hauts-de-France,C=FR,1.2.840.113549.1.9.1=#0c1650737963686f686973746f72794042617764792e466f

Chains

Jul 31, 2026

CN=Gantang,L=Saint-Quentin,ST=Hauts-de-France,C=FR,1.2.840.113549.1.9.1=#0c1650737963686f686973746f72794042617764792e466f

Minor OS version

0

Major OS version

4

Entry point

13564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Bydel.sal

SHA256 41e7d7411a63e4bd01b873f983f33b2038a2314892ce1525f2a13b306b8033c4
MD5 18b6f2a406720904dd588c51a783a633
SHA1 52a5b41ee46ca9489fff2078b34123feb89585a4
SHA512 3532e3c1484bd3ae5d1072816d815940a5308772c08ab0d644dffaf81a11ef458aeed266345f027434e7ee3edf1b8d711f7faec90697dcbcc418836f46cc95eb
SSDEEP 12288:8ixmOyKXDTzL2hUrkVbIZBupJhUZTJouS:nXr6qibAGU5JxS
TLSH
T11D9401447DC0E97ACBE23C3A542604CED06D40D2EB636BC67DDA6E2D8C17862695F38D
MD5 SHA1 SHA512 SSDEEP TLSH

Elendighedens.Bin62

SHA256 926ae4ba1f17c7845c61942c48ef4238a6296c1d3448c2dcab3f49d8b94be253
MD5 086f594f3a15040fec1ca3620feb5715
SHA1 5a4ac959ac7a232ad2aacb42a533cf81f5a08d87
SHA512 576ad9b17071e08b1f2818125d991b5a3056c97d7de39fff5af272f20d840ff6918b8547b01cb8b24f5abfe59eca51f6cf18468e18d29edc46b8d66131e083dd
SSDEEP 1536:+JiWIKXd/IbislOW8q+4OWGwFGkLxeD7Pkt5yiXSlxCkN8dMJsB:+kW7NAbisllD+45DFZLxmPkt5yzOz
TLSH
T1BA33D074EB75099C890053EDEEA50A351F2C4E7C863994E6E23B31B700871AD9FB97C9
MD5 SHA1 SHA512 SSDEEP TLSH

Phytophagous.for

SHA256 f074fd527893e1f6fe6652890f0653c426833f3dbf137d62cfb7084672316eef
MD5 5984a103d9508e94fe19984c268ada41
SHA1 3fe6114a2645ffb05c9c15b02e25c8d507f7e927
SHA512 fcc9e445f0396525154a700d92b55ab85b2090cbcc1c18dd3c5aed3bb93eaadd2f620e0484ab3baa94945258b3eea6d0685e21c986e4a5d39b5f4a1f872f3afd
SSDEEP 1536:c31AheB4IckhcWWv5v3rxXMpTS77B6RHmO2o9M14uEmDUZiNUpGCQdYAZ0NnXbzw:e8/HCy
TLSH
T12536129CB6A79DBCAB8AF85CE48C61E2D55C89CD2652C044F04638ABD14E4E3E485DF3
MD5 SHA1 SHA512 SSDEEP TLSH

untastable/Chambrieres/Underbeskftiget16.jpg

SHA256 249919ec76b7c27fbb08fba69fb7c0d0da8e4567da47355ef1af5528a668807f
MD5 7f17141cc8fe2007de7496abf89a6e5f
SHA1 8c1c04fa33b43d23816a076050cde167297f90d5
SHA512 5c4ced04b2a222b8ead9483540f48d72e3240d5022e55a43590301ebd4937a91943e3b1a502a1dd90c5686d1f06b6c06b50b055631eff51a16b6b28699bb0358
TLSH
T15A515B82F74E234097B4177FA50D2A7A45EFCA8A2500AF7757288471A8B8E38C58586B
MD5 SHA1 SHA512 TLSH

untastable/Chambrieres/karborundum.ini

SHA256 7d17bd97458a04660b7c4038bd99d37d557227c52bd8e9b337d901b4dd763b3b
MD5 abd1f505619d031fd1fb6d360bd5a632
SHA1 f1aec2f9edcf0248bdc1e4a8348c5b3cc867aa15
SHA512 d2b0ab2ac2e223b188ca65d260cd14fe3473dc4d7f4ec61d4a7cb135f862bd63ac144c3d3f45e55be7186f17033cafdbf44b4aa1dd0e87f45092468113402845
TLSH
T124012370D84601AA5F5291FC19164DC7006D8361C75252F3EDAD834F262B4FB733551E
MD5 SHA1 SHA512 TLSH

untastable/Chambrieres/lamelliform.txt

SHA256 fab14b288980e7968f1817b9569fbfd3ca073a0e29cc6a1b3faf752e11720e94
MD5 86af109cfcc171e04ecf87537c2e6ae9
SHA1 ae914eb2ae1f98f43816f519e7b46955533782f8
SHA512 b733ede8a69dea8983bb0f68e25cc869aca94d3484830d026f2368a36edd7fa78483ee824ee092a9c2514ad5183c458064b556299672886a6635d2e9aa013a66
TLSH
T139F0E1C9AFB90C06804647679C50D0CF8E0C42504C4A45D5FF0D768FA945B58E33FB0A
MD5 SHA1 SHA512 TLSH

untastable/Chambrieres/lapis.ast

SHA256 b270a3451c859853165ee5eb474869ed45dbd5894a84597f0856a09e98bda1ae
MD5 fe3b9ba772c3c76d642e31dab67f8e93
SHA1 f8836ece2837696a355184456af1dbb3fab542a0
SHA512 0b4570a0f471a56c2d8ea54b8216fb0be856672162e123430477ea973fb564cb2138b958bee478c36b423d9a4108e09cd3f1abb743e24aad82e58cba42b96532
SSDEEP 384:YCaFWYGnm9pjy0XYY41r4IveFJxjmdZUjjfZaekLD6/kFZoIwuq6Xz0jve+CvTxI:YxLe5QPQU1Tr
TLSH
T1950612B55048E5EB012FD9EEEC6E13A85EFB625B09745C587D20064F8CD66AFCC3884A
MD5 SHA1 SHA512 SSDEEP TLSH

untastable/Plejemdre29.txt

SHA256 a1d210ebb95528e906ef1359e084ac8f9fea13581c91ed0bbf643173971fe584
MD5 548e8f238b43bc68215fb4e153d42411
SHA1 a57bbc728cf972eb5623173c1e46de72fe4d70e0
SHA512 3ca9bc384a27320421d24228b599638a3c7443dfdc3ea05f327efb525030addb677ffc283949d128c2cdca8bff8d6d88f078dc630e1bf197fb5c1c95db16bcc6
TLSH
T14EF002502B5C85C41419DACCEE2578090A50445E0D2110E5C19B533D658B68ADFD8F51
MD5 SHA1 SHA512 TLSH

untastable/Populationens.maq

SHA256 6cef029cb3f2b595f0fdb3d70155fab8d0137a279539e91683cf84cb8c7006d3
MD5 e10fa57e7e11ee561407fe45db1bcc05
SHA1 2d86f4e5ec023df4d373fc5eaaa06c828afedc63
SHA512 8b8935288e164e546e7f180c77e22764abc3ca5130edbb5e6501f50b2e5a63a205ed02680cd70ce4abb80baa5be5bb9e30b39ce1e93d2e2a3559d614fa3316be
SSDEEP 384:9bUQbuqXnEWnv3zVYXIxMDdSI9cOZehKZTJpF/OP:dHbuqUWnvDVoIxM5S3YjFGP
TLSH
T1876612E33EEB20F6531E5103D4B99DEB630E96D97F4846676B6AA738E0CB1F54C08840
MD5 SHA1 SHA512 SSDEEP TLSH

untastable/Skrammellegeplads241.bir

SHA256 86949e90fa9d9c152f8ff313790aaaec23a49805d14a0611e083ac6fdea45a84
MD5 81d846b4a94977cb1cb99e90e74111c4
SHA1 2f9cba6e9937304cf01d0feeba2e4037f53f56d3
SHA512 c6bec4cca524c5daae4de4cc3e66051c4fe9d0203579898f31cd6d3f6e79226c3a39805511a285c3abf314c30105d4e8579280da02c946ce679bf61fd0c13373
SSDEEP 768:LEIwHUdrxhuWDmq6L3e+KicFYmntmsjbJ9rlEfIMPhxcaegrnH5OorlxzvP0xuHf:8n
TLSH
T1BCF512C177443CD07824810795FCAE8E4D1368297CA32AAEEDC87F1BDF697970AC6994
MD5 SHA1 SHA512 SSDEEP TLSH

untastable/Systemindkringer222.ini

SHA256 641bbaefba32de18940042bc42e5cfd448cbba22d2ea6325f523c6cfe6169024
MD5 27ec9799911cf49e7e02655c0951640f
SHA1 93a83bdf53d9eb36d047dbe2f0480e6b83898f04
SHA512 39322d2d12407ef21ff21193dabc9a11d6b6a4d81151cabac40cd552f6caeb825e53fab550985bb09820ebd3464a83e04a8976c28fae30ad78967811a6b1411c
TLSH
T192F0D490CE8561500B47975188144D124575C61C688CA1456FEF4BFF4A93CFD43FFB59
MD5 SHA1 SHA512 TLSH

untastable/Udstedt127.jay

SHA256 7a4a701dc045eac4a81ddcf0ad4aff6ee3af959f96ab09eef868723c8e705d16
MD5 13606c9951a9898a0232dd98002d9a53
SHA1 3335bd0b2191fcc884a106a2197c66549bf2b4ba
SHA512 2f21a856b544476bcf3423ec0ff80df13e516c5538b4a2ffded3c91faf535d5365f51e77dc864288d0cac6c4f3e863623004daf1d6d4393d893c39d34a5c550e
SSDEEP 384:tZFTHpdczB5ii5Xv9zF7yQKADfZajFiGhFwV0WYffeSbLXqVtzvbl9MGCL8rrTFe:r3YxJrZ4
TLSH
T1013612FA62F3733E95D20C1D29671E1C361EB98AC551AEC2D171A6FDAA718CD31284E0
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer