26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb.exe

26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb
MD5 44ddc80c714f91959bcaa1aeb3cfe1d5
SHA1 7a5ce656b36a081d0f93d5add93a9c8ddc329abf
SHA512 33d7d52c606db4f42e9d67a67e1ac248b123c71be6c55ac97f5dbaf755e0b969b8edf619c8a4b7afcd9a951c3b8e580c93f4a90380467cad48300d8186ab6f1e
SSDEEP 6144:LT4DtAX5NIc71RWI89tgqNw2Tn1LJ3kcMGuzIz39zl:LT35/z89lJCGl31l
TLSH
T1FB2412A07769D453E7C382730875A77A2FF9A1BA66249F076F023E0CBD92782550F312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

57:c6:62:02:bc:23:9f:31:a0:7e:ab:a3:32:24:92:df:8f:08:77:6e:33:7e:e2:7e:09:b7:39:2a:a1:ec:58:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Nonunions,OU=Arbejdsmiljernes Pemmicans\ ,O=Nonunions,C=GB

Chains

Aug 6, 2026

CN=Nonunions,OU=Arbejdsmiljernes Pemmicans\ ,O=Nonunions,C=GB

PE Signature issue

Digest

42:7a:a1:7d:4b:0c:c0:dc:99:99:f5:85:4e:c7:f8:6f:b7:b5:7f:2b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Nonunions,OU=Arbejdsmiljernes Pemmicans\ ,O=Nonunions,C=GB

Chains

Aug 6, 2026

CN=Nonunions,OU=Arbejdsmiljernes Pemmicans\ ,O=Nonunions,C=GB

Minor OS version

0

Major OS version

4

Entry point

13509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
MD5 6e55a6e7c3fdbd244042eb15cb1ec739
SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
TLSH
T1BE428D1193B089F2F590593805A67F2A6FBEAC5C27E44A63CFE345853D702DFA47A243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Brugergrupper.mun

SHA256 47cf5ae0abc8cd34d02ffb94f51896aebf190b93a5308a15e86f753867a68de7
MD5 6349bc71b94c2332e866a8379302a4f8
SHA1 0fdb55c19044d84e73d331ce1d0faf6bf295b1a1
SHA512 450985f65e5e53f583641f9fbab8137e90724c5f4e9fb73d33539f4ceb922f55ce992abddd3975fe72efd83eaa1076969d4a9d000b214dd633c96a00e016459f
SSDEEP 3:3xvH3xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxD:o2xLuY6Bo3wnHC3jBQ3iBD
TLSH
T1FDA12BFE231042288879401D80C0505185DF8F242C42403800ECC90BC0333024600AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Imperatives188

SHA256 2b48b0a10d7ddeb7a62543dcd3301d38b2113ed580e13f613d147ecbd02baa3e
MD5 1b5c4ef4b7d99b0d3dfc69dfd9332e56
SHA1 b4ea35b71061e4fd6f3b0199ce28f3dde7a7e13e
SHA512 c62554d5afe8e4eefc01fc3110a0821ec761e37aad9ed624123e05285b0462ab429fe354b024a8d29c5dfe8ee5f4ab06eb3dc69043223871b88ee70cb86721aa
SSDEEP 3072:XvosYOr9K+WQVxmQloXs0OHYqYC9AjGDdExbcFjoF1XxKBfDh:XRJLCEoXs0OHcC9AfwJozXxKBf1
TLSH
T1F504F11E49172CEDCBE2847C8294FC2D18BA3107992E1C6D4EB66C9499733DB7B5C86C
MD5 SHA1 SHA512 SSDEEP TLSH

beskyttelsestoldens.vol

SHA256 c608ccc295835c38969bd2fecf71010fc488869710ebcddddbbac654db3943cb
MD5 0b571edfbdf241dd04b63593183b75d4
SHA1 9bf57b7f01457db408c8fb0fc5c1c85f8692333a
SHA512 2766a028b0297ebfd9518ff8bb7f5613da7711d5a6348d87da7ccacca6dbe6d44f65041164c6d4469bc6298fd8a2eb106de2c66d7f3f1eec16e6c9c359500f10
SSDEEP 48:Cfepek4XxcPwiO1YAQPlX+tcYoIkEYVSlS6mQTNSK0yea/ZlXIkNK+Nn:CEek4XQAzczV+N4yn/ZykNK+N
TLSH
T178531D56AFB2151F4B049789414B1537A09A999345532DCE73F038B73B3ED0D164E844
MD5 SHA1 SHA512 SSDEEP TLSH

faginspektrens.sup

SHA256 1e7d5ce8411e5402eb8c636139a30d0b8042c8c8d512230d4129a93aad7f7219
MD5 d36237ec38c94cf912158ab01d3f9d79
SHA1 fc274831107300c0630bf453ae18f1b9e5ff59d5
SHA512 ff2d4b72f4906c7c168aadce7ab7b9e6d41da0d9253a06849db231e7e3a2fd5662b59b0dc7ec6a13a18ca15f9198e5f511dbe8defe5863b9daaafa5971fd6619
SSDEEP 24:TklhmVBMw9Nq68C3WD3VciihzWUkRoiaUOkNkcwZQGwK+PBZAc:YLEM+g6Z3gF7/UkKVUZNk3ZQGwZPEc
TLSH
T1BEC2659559FD285D3A934D1652A6A589B8901009AC7B7ABAD1538064AF7943809228F1
MD5 SHA1 SHA512 SSDEEP TLSH

multidenticulate.spi

SHA256 907082abfe9061eeb22ecaeab9165b5383247f3dca7337f3bea91fea86818bc9
MD5 712a6e8e86d4e257029f043af9082b6b
SHA1 75b1dc4970ad326e93759fb92549d59d4a00d0c7
SHA512 ac83173ba77e14b793fb908b00b0f0833c88d7ac58559247163dd3c71df523f16e9cfb3007d923944b2ac6618749e76046dcefbc4ea6e5825953494bd390eaf9
SSDEEP 96:w61vgzpW2iHL+p2ll6gkGQsBh3IG/cFvUZI0CjRNpOFzdaAXfLQifG93bxcgG:49ELw2lITsjYGkUZI0A/SAAPpKG
TLSH
T1FBE36D58CD3373BE9D679BC5C10A6A5AD52AF6616898705C8B8F237030A6072F34A17A
MD5 SHA1 SHA512 SSDEEP TLSH

ruttedes.min

SHA256 21719d1dd4c967272b92c538854769852eaa405b0e7930a2e5f9416b215f9b07
MD5 a90260617331137f2474d9fcf0240fbf
SHA1 f88fa79f6996322fb609fae67ac854f2d4c1c5d2
SHA512 6bcd2caa2d6824be17f31ecf5b65badc223e8856035fe19c0d7238cde68837e2f64bee3526c7098f63bfa75ef6c9a2df9ce1b2d559e42e1fcee4ba7e082e9d17
SSDEEP 192:DK7tLrvDBcs7ss4OeYdAT1cq6cQAt6FnIuNXom:2nv1cvsmT1cq6vAt6VZXn
TLSH
T164D38FA4B73507091B563425B1CFDF1F11A72A6BFEA53FA63CA399ED48C5CCA080A344
MD5 SHA1 SHA512 SSDEEP TLSH

skorstenenes.mat

SHA256 89a8eaa7152e16028babd6d1c443230776b46412e69fcc352f4d55e0fc99b652
MD5 5d611036201e7619944f21c85783dbec
SHA1 57317cae247d94ae20e59a837e0d6b7392a4446b
SHA512 b04bd4b4c968ab8913e6083e3bf87bb347e55620ab2d2c4590cc46967b865abcb4a0ebc05e4a74f33d83dca2a6b2dff2638c01575c732be2f31262207daa3d14
SSDEEP 12:NzBSUKYsQeAhAXSaWlO0y+5bo+zYuQGQBQoeBWb+eOCUNf:NzYY6AhAiaWlDyMlYuQG8Qoegb+eORN
TLSH
T10892269113D9D68ADCD690467201CDC9E5B4C7CA8E25EB40E5ECEB4B034E44E715CDD6
MD5 SHA1 SHA512 SSDEEP TLSH

26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Brugergrupper.mun

Imperatives188

beskyttelsestoldens.vol

faginspektrens.sup

multidenticulate.spi

ruttedes.min

skorstenenes.mat

Sharing

General

Malware Config

Signatures

File Explorer

26fc8807ce9a5e6dc534c237d84c2ac7491755532a2078878bc8fb1695fcb2eb.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Brugergrupper.mun

Imperatives188

beskyttelsestoldens.vol

faginspektrens.sup

multidenticulate.spi

ruttedes.min

skorstenenes.mat