e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43.exe

e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43
MD5 5270fcafecaec9c59785dc8f6a316b70
SHA1 fb25d459e5c5d4582b7457e714b9fbec32da7476
SHA512 7755dc93c5da380d462ed009a2b633bf326a7a5dd3f55e2291fdad0111b03ee462fb58dffb734ee2b2f31425b184913eccd9400c3108dd8665d11859283565a0
SSDEEP 6144:k6bAcJuMn7pb+YwPk54PCHuh46MPnoEw6uVWcH+v8w5lVenN:rbNKu4PCHuhOLuTZw5lVc
TLSH
T13094F1023710D66AC8EA9A3B8C4B97E64B50FD585B509F177364BB3F3DF26019A0E385
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1f:23:29:d1:a0:88:ab:4c:2d:f5:3e:27:c0:c7:38:98:60:07:57:d5:ad:dd:32:d8:4e:7c:4e:19:f6:76:d7:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=dybbuk,OU=frgehavns Kassererske photometeor\ ,O=dybbuk,C=US,1.2.840.113549.1.9.1=#0c135370757474657240566f63616c6973652e4c73

Chains

Aug 6, 2026

CN=dybbuk,OU=frgehavns Kassererske photometeor\ ,O=dybbuk,C=US,1.2.840.113549.1.9.1=#0c135370757474657240566f63616c6973652e4c73

PE Signature issue

Digest

8c:b8:25:16:5d:58:30:72:bc:23:0b:a3:7c:79:6b:3c:1a:2e:b8:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=dybbuk,OU=frgehavns Kassererske photometeor\ ,O=dybbuk,C=US,1.2.840.113549.1.9.1=#0c135370757474657240566f63616c6973652e4c73

Chains

Aug 6, 2026

CN=dybbuk,OU=frgehavns Kassererske photometeor\ ,O=dybbuk,C=US,1.2.840.113549.1.9.1=#0c135370757474657240566f63616c6973652e4c73

Minor OS version

0

Major OS version

4

Entry point

13136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
MD5 9625d5b1754bc4ff29281d415d27a0fd
SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
TLSH
T1BD325D06235081F3E1914138846B3E175F6A15069BF58E97DFD38646BE30BE7BD79503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Optrvling

SHA256 68ee5826ab077526f6d09b9744cf919d76ec5bbaf82c7a4d6d4f23d21c9958d5
MD5 0b4beb35c705c94c43ec548a83645037
SHA1 76f87e140ac5d891565e9d888c12d6379f8d134d
SHA512 28dc3cdc90e7c4f189f7a29d52d8961b4e99abc020c27d83567352c10f94fe052a214b86c89c34206ad74289f29a89c13f02cd35cbd9adfd5ba2317a7a2aedc1
SSDEEP 3072:Qi+YLRsXMk1wI7BmvJMun3awoUZOOVKb5t1+EG1zj4ysSOk:/JWXMfyEvJME3SPb52EGZ3j
TLSH
T1CBF3F14A578DF9C4D449C93C80394ADEC8E72061870FBD0EF02AA45D4BDA79B5EE2CE4
MD5 SHA1 SHA512 SSDEEP TLSH

Scampingly/embrangle.jun

SHA256 65a0d2c0617ee755de132b5bbf893623d32c5dedc8ca13a361156c5ffe4288e2
MD5 2b4188b8380ca490358fa51db0b63468
SHA1 4b5a94184c37200aeab6cd7e44c595fc3ff3669a
SHA512 3951458ebfa9f74e366b7c5e46afd2a7dbd5514fc320b82f63d9f01287b0e2b748b3c87c2156761bf18683fee60dba42222425094b83547e04f1ac539652ffcd
SSDEEP 24:8kdoZPcugSoHZP+VC039yhMvwxKh+4iTRcsj76xBX7:8dkugSoHR+VBy+vwxI+48csj76xBr
TLSH
T1EAF2D861C140DC7258B9A4F58E36B30189B8FCA05C8AEDD972B3AC4DD5AB0C7803D5EE
MD5 SHA1 SHA512 SSDEEP TLSH

Scampingly/strukturalismes.cou

SHA256 4bb63835cc828f63e747b7c9a7bdd66d9ac03202f22513a3255537a1da965a29
MD5 0a2fc3882b396991e2f27b4d54a44db8
SHA1 7ba56588480495e0e87b9da465e3966aa3010556
SHA512 17d6589791ce57b7dead9fcefe792a30c6a327c2789160cda203bbc112a86b1a7e49a2168b76e08ca52450f8b12026dac128870acffcd5c96b34214403b68da3
SSDEEP 48:o7QTwqkWSk1hroYEiTgLRg2fQ3pe6ifKX9HjfoDbHHKqZPYweWq2ZqcPbX22n3ko:o7QTtkxuhroxAOCX9HYBPYwDgcPLlN
TLSH
T112931C8C0E3C2EF6ACF93515C8A1B2B44DCAF0964AAF05446A4B93056AA075661BD43A
MD5 SHA1 SHA512 SSDEEP TLSH

amp.dre

SHA256 0ad4f621ca28b1f37eee12abf7409645c196da960c2ea33c3749856836330798
MD5 82b167e76f5722d08faa95e3007e86a2
SHA1 563717efc81643c34b41fa4fb6d2adf4ce09fe48
SHA512 3b338c73c6855717611a0c9da2f9108d3ec0c3ae3f1be6ea4b9763b5534640f445392b8b04c02d709a9fd0704085e81393457fa7fb669dbf7d52d87c8af39345
SSDEEP 96:TjYwPoMEq+SmivKc3y/obkqzBqJnNZiyRPEFAq4V+qbcZdj2:Tsxci/j5Z+na
TLSH
T14A732A8951E3074F6543C2C285EEB48177E423A084AD4211C830DFAEFBF8842FE65C11
MD5 SHA1 SHA512 SSDEEP TLSH

bromatologiskes.sep

SHA256 7c5b8299c686c163c593e2d514672e80956664e98455abb314c454b003edf00a
MD5 09e11a033ba6f149d65f3c855675f2fc
SHA1 9b834ac3f8def17ede50d9bf8b624d42196c1c6a
SHA512 16dea2a93250a69b4840e6d08d716f2b329edee1f9889a069c8080d07e3887be19d9ebdd5c2c8d3ccb36ff32b8ca70d27cddffaa80f619e571ef8c3abce6978a
SSDEEP 12:s2lIX9PjUXa8xdkc08UmD6XPSEAAXe8C5WT:s2lwmq3jmehTCG
TLSH
T1E852F18A001190E1133A9601FC897134B3A1932C81B2CCD970DA603EC9C4C2BCEF6D52
MD5 SHA1 SHA512 SSDEEP TLSH

e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Optrvling

Scampingly/embrangle.jun

Scampingly/strukturalismes.cou

amp.dre

bromatologiskes.sep

Sharing

General

Malware Config

Signatures

File Explorer

e14a32aaaa2b8610197b48e8cd566f9a913688c69dffc2666bd676a881005e43.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Optrvling

Scampingly/embrangle.jun

Scampingly/strukturalismes.cou

amp.dre

bromatologiskes.sep