bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469.exe

bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469
MD5 9a774170ca41a6edff9629ca7bb2a96f
SHA1 2795a858dcb93cbf269554f448710ac6977ecf89
SHA512 900f769ddaf32bc2eba03bfabb7145a101f7d802b37caf34c43099c92f0cf913d7b7a655fb351cc0e63feac4b92d647418055ba7df7e10426356a4a1fbbfd3b3
SSDEEP 6144:Cbfopdha+pV8OJt1FuyKdnnKSqrQeG4hphjlRFFYMhmHW:CbIc+p+O71FuyKdKSqrNjR3v
TLSH
T1B954E12472B6E047E5523A31CFA5E5F86859AEA0FD29E44733123F4FB8B5F81CD45092
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

75:ab:ec:90:e8:59:f8:10:4d:0c:0c:c8:ab:f4:58:69:e0:cd:63:9b:39:ee:17:1e:1e:31:5c:e3:ce:e2:c1:a3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Meningocerebritis,OU=Svmmefuglene benthe Wattsekunderne\ ,O=Meningocerebritis,C=GB

Chains

Aug 6, 2026

CN=Meningocerebritis,OU=Svmmefuglene benthe Wattsekunderne\ ,O=Meningocerebritis,C=GB

Minor OS version

0

Major OS version

4

Entry point

13674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Balkaniseringernes

SHA256 b50b953c853ee52baab7920924946f46ed48c1d99cbebd7e603f8cbcea50f2ea
MD5 334630f7ad3c2f4fa269f6d171006f69
SHA1 f1d6dbee9b5a323f6e11b4c52e8c09e7db3a3b49
SHA512 db3912f922e3845c59413c94cc16cb0596e2f626a7a8d9697baa11c5f3003ebf36ce7ff2b55b266f3c0502717e747823d3e585f9b84cc489ac013829dfdd88bc
SSDEEP 3072:RP+t+a+WtLhwd/T21kS8a3syI0VCWRDtKFWQULLLLLLLLLLLU4uHIFR6WsMpJ:hW++LV1F+RKD4FT4+jMT
TLSH
T1ECE3F2323831413CD52442F7D52847E1FF96A1B80A1EA8BDC7E624BF81F42EE59C559E
MD5 SHA1 SHA512 SSDEEP TLSH

Prelacrimal/Akilleshles

SHA256 6135d5bd4ad282829d5e3e4885590f867541fcb9dab8bfbcac0e60f8ebed07ce
MD5 9f8e795c804ae231ea181b1a764f8373
SHA1 b69687dd1d4a066ff7568b08ea0ecfb35e2b96a8
SHA512 142ecf920bc6c2d78220ba23b479121b0ed49eb89b5f8313e767fd1f34bcbae335ec9a396947b8e7f4f82936725bd72575477e38d092c180e70cc104066d1ec5
SSDEEP 384:Kc3Hb/gNhZMoGj10qChCMMNktf8lLC1ZpwX3sW:br/gNkqhhCMHtfkCgX3sW
TLSH
T163929FA6C706DCBFED47C378E9EB22E74D04C0168B0FA86ED574A92A81476E25338651
MD5 SHA1 SHA512 SSDEEP TLSH

Prelacrimal/joshuah.rea

SHA256 862dccbc39e1a91532e9ee039a37175b59c7eea1aaf58977da9a6f76bd0fd7bd
MD5 6f2c47fd815436f6bacff4469bee07ca
SHA1 eb45cbd1efb622afee348d4363437834f9b6fb93
SHA512 fae3f00020a83f9ea5dc63d0ec5e694933cbd149044ec8b237cb427b6e2f43e632011170130ad3964352a7c1ab015356c46786de8c7a73d58bc272d0a1bd037a
SSDEEP 48:K1KOBRWqoJV4+MK0hHWiIKn2FJrsEBJzVv5dymy/pj4pgLW6s80W3ZxV1UOK:qKQDLTnGB1XdybpjQ6sLWJRI
TLSH
T141C22BC1806ACFEBE2B4ADC173F4354D5318044A4E1A5A023875D8461C0948B33BEA70
MD5 SHA1 SHA512 SSDEEP TLSH

Prelacrimal/partivares.tan

SHA256 cdd526f1cdf1f62b3e0a61231614e0d6d986db20fb115a17769141c23c90ef44
MD5 cfb8c4a0df44a19758a52035ffb237fa
SHA1 52b6779060f65b56316347168574093019e98844
SHA512 3404a286a53b184fab52f21a098986a01f6196fe0b88943ed08e5f98b581356586ce0e9e3425ab0a9558ee707351a2c85ff16a4cf829ef7ffdcfdcaf0b9cb5e6
SSDEEP 384:SUFYRifGcVdN1vY76oQg92LZnuwQUILXdPKSAZRM:S2fGcF1vY76rgcLZuwQgSADM
TLSH
T17A839D98EDA8FEFE60FA6DB5C48DAEA5848591E746B06F00FF2CB348A008D102DD7105
MD5 SHA1 SHA512 SSDEEP TLSH

Prelacrimal/tilskadekomst.emp

SHA256 40dc37d959c8c4f5d17d3d757b44cbcd84dca0ee395140a5a70e622e83e97ef0
MD5 abf25fbdd3a8635fab7c61922dbc6191
SHA1 acea7476254437bd3eeb081d27d78cec2af2f871
SHA512 745a8e3246128b409c6c473ef6b22db8241c8164a28f7e017b6af40912d412fe218d662e2e8f0abde16b9cb717661ebfe863ee9d60f415caa19f407fb16205f8
SSDEEP 24:eyBPzRykF2wsc8gVTdZT72a0qMfwNHI8b06uGyIUKBDUBy:eyB9yknt8gNdZThMIRYGyI1BAg
TLSH
T158520A269034FECFAE04500DACD964D7A60607C1D6492E7648A3109CDB1792586731C3
MD5 SHA1 SHA512 SSDEEP TLSH

joshes.nat

SHA256 32539d9e474d9b275a86ddae3598343f928f450022fab52005c8189a312565a6
MD5 9e53819b4a7021a2d50e9b8ba3aa43bb
SHA1 0844d22eb7cc552781183de93d73c5a38b8e92fb
SHA512 11757ec6d586570d9121c8f8e3060b4a61a375c9bbd76e2c64d9928799a38663482da2960cf8095e2fa15c61fb2ac1380cc2239b42104ab3fae45f5ef6487f22
SSDEEP 384:eUat966cP9gQ6DZQMvRyn0De7Ly07F2e5:eNt966cP96DWM80De7LXF2e5
TLSH
T114536D2198F8231F45186FA1DEA8DB88EC17623237571720D86ADF8391BFC45C22A874
MD5 SHA1 SHA512 SSDEEP TLSH

bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Balkaniseringernes

Prelacrimal/Akilleshles

Prelacrimal/joshuah.rea

Prelacrimal/partivares.tan

Prelacrimal/tilskadekomst.emp

joshes.nat

Sharing

General

Malware Config

Signatures

File Explorer

bbb1778cb174f526ad3d9530d548f321efc4346f2f1686155dfb3a29b7454469.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Balkaniseringernes

Prelacrimal/Akilleshles

Prelacrimal/joshuah.rea

Prelacrimal/partivares.tan

Prelacrimal/tilskadekomst.emp

joshes.nat