f2a14ab6b9d45255710fe9541e761de772ba40370628d6608914e6d47cffba9f[.]exe

resource
f2a14ab6b9d45255710fe9541e761de772ba40370628d6608914e6d47cffba9f.exe

f2a14ab6b9d45255710fe9541e761de772ba40370628d6608914e6d47cffba9f.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 f2a14ab6b9d45255710fe9541e761de772ba40370628d6608914e6d47cffba9f
MD5 79780fb926998227f45e12ae6f50718a
SHA1 cc35eac5f42e4e3139d3e5373db4c118170aed6c
SHA512 6b09fe3886ad868b10d7ebf7d0190031487de60562781fe05a29e9664215f83aff89b9e0d0e8061538b44b38d886d2b2b992c6c411f5aaabe628a0fbd2326059
SSDEEP 12288:BfYMVhkPTOrbdVv7rxbpVMrTdwWeelAZUW83VFJTpDdF2V9Of5pfaKGp3ba:BfYu3lV5bsrnlTFJpDdF2V9Of7JGpba
TLSH
T104F4CE3E6E93F422EBD8D978BC19FA4E5D10D8D007BC1B5E93B06A2974A5A55B00F13C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e0:2e:70:f9:57:33:46:3e:2d:a4:88:90:07:02:ab:2b:ed:ff:9a:f0:9c:39:ec:41:52:49:44:49:b6:6e:af:ac

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microdentous,O=Microdentous,L=Massy,ST=Île-de-France,C=FR,1.2.840.113549.1.9.1=#0c184c6162617269614044656c6b6f72616c6c65726e652e5269

Chains

Aug 6, 2026

CN=Microdentous,O=Microdentous,L=Massy,ST=Île-de-France,C=FR,1.2.840.113549.1.9.1=#0c184c6162617269614044656c6b6f72616c6c65726e652e5269

PE Signature issue

Digest

b0:12:7b:95:c5:c4:fb:c9:56:79:61:8e:ca:39:2d:b2:14:e9:76:9f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microdentous,O=Microdentous,L=Massy,ST=Île-de-France,C=FR,1.2.840.113549.1.9.1=#0c184c6162617269614044656c6b6f72616c6c65726e652e5269

Chains

Aug 6, 2026

CN=Microdentous,O=Microdentous,L=Massy,ST=Île-de-France,C=FR,1.2.840.113549.1.9.1=#0c184c6162617269614044656c6b6f72616c6c65726e652e5269

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Circumlental.Gul

SHA256 fe097aac7d1e9ef02329964af6be2ed95ac833c796b79193bc8245da8d6d2ff1
MD5 423eb1a6897f2b7a808ad729d528c5b1
SHA1 e8ec28b7b676c2d3a8ac0d8bba09061357fcf975
SHA512 d715746aaf051bbacc9d8f3573b68a9bdc020f6abad5b1bf19ff722431ff1c26ec015a6dddfc6cbe8cf032d0c9b43b822474a43323ae8fa6cc43f6d62519152f
SSDEEP 6144:uLDSL18fi2J5ibfC32RvymH9jM67q8Kb/L0sQFF2pFdRCJ7Nheuy9y:yjZTmh9qt/L0sQFspF/oBey
TLSH
T12184F164164D5CE3C3037A334BF84699D55398327B83402D2B8FA6C7C9AF8776B54EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Fideistic.ini

SHA256 cbf06545d23440d7366f2f6d82996c67988f021349c67e96a814313b815ddafe
MD5 6879f19077b0443fe3df5603d042a3ff
SHA1 d30e16273abdb7e473c4d810e658d6fc75e536e3
SHA512 aa169a82fe4aa24a28c68158dee8c7fa9592b805e618052974a275912765a3355e22bc31f9cae061d73ecc44efc648f71c76ddd92d706cdc0092f5c252c80fb9
TLSH
T142F02675E40C1C2D1D03C2C7019F88439174B42E5E300029F1E7571C925FACD8BD746C
MD5 SHA1 SHA512 TLSH

Gelded173.ari

SHA256 8d2f0e5d660efb9c00e93c5f752dadab47edadc0639856ee0cd7128bd733aefd
MD5 6285f575839aad752468881c25149e47
SHA1 4437d4fefd985ce75690211bc5a771fa3943172a
SHA512 e4909eae8528020167fba97f4256045cd45cb4fcaca4dd90ddcce327acb8cdad4ac61cf2ad38daa2fc19028e51f7ae23b096f2f8f2ef4be4cde40a632582295e
SSDEEP 768:be57o9tUH1PBrGFKsHqpNb5seU4V+92a9ei2IHGXv+tDPRg2Up9ZWKfEp4kfhLaF:CPTUqIpBZajuV89DLioHHpq8BlJ
TLSH
T165641246CF23F03B39E9BD1A2DB7D1B4B8307994783A9C47915382B4B2D6C421365B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Pigments/bipenniform.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Pigments/collates.txt

SHA256 b9e549099b1db357f29930f07ba0844c2e6241025133276ddb133bc6923a2bd3
MD5 6f9b0c75fa794590d6defffd656a698a
SHA1 7025aa591c40a5d014e33b89e5d4e78667d0a81f
SHA512 e1ca5ee4d6e02fd286409745b29d0c9b27440489ae35e084d66db470cf9435f6ee495296c04422b7c4155cf282ee193fdd720aa33d1cb631209a31a6338773c4
TLSH
T1AAF075683DE21026162F01F8FCE7061F3068536C6568B696E5C2CBBC228274DC23DB7D
MD5 SHA1 SHA512 TLSH

Pigments/kommunevalgenes.txt

SHA256 8b87ff6f7e8ecdf3f57b51d3539a1f6fa70489dba9444efe525ac90158458986
MD5 25dab045267f3e0a989f5d97b8957cc6
SHA1 e8a72984aa2385844858f4bf4b6cca1c36a9924b
SHA512 e18372164598500360faecfddef94e06ed89f32e446f154f0e3ae4f3d4d847373b7c827417a44a5ca2543ebee233de57632709c70065c8441dd923695731bec5
TLSH
T15AF00560CD00AE7F0D6A446BFE4A4F530997C104853A594D7AC1C74538510DC85BF765
MD5 SHA1 SHA512 TLSH

Politistyrken.ini

SHA256 05e7674b563b0aa286e0d9edf65bb81ff5397537b736c5635a2047f86fa1bca2
MD5 407f4e6c3506ce7bd99d42d229e41a68
SHA1 9d36256c9fa9f118f09408fa2735cf2f3b6fc173
SHA512 3554a5a98541e2e965ab9ba3aa98c15ffcdc962aa98178db409db023eb2869cdccdd4917cc387644d29b5775719fc4be9946bbe12e5141440a599beb704c8999
TLSH
T1BCF041689DB01B0F8F5626B37C80304059E006C4E32242ADAB5E065C0B0BBDEDA6C81F
MD5 SHA1 SHA512 TLSH

Weasel/letfrdighedernes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Weasel/pensionskasse.txt

SHA256 71c2c1d1e9dca1e2211c724789761d04542bb16007ab40a0775dc2d6069290de
MD5 aa8d9a7a394497b3b162347d4d94a7db
SHA1 608c5b6fef074f1eff076105f1bb96a667c2ca45
SHA512 297158f003ed5ed50218e0dabc17629024e651b6c65af24bbacb38ee62dcf0eba3036802af328ede6dc194b2921c0c98a452fa153b377c4d21793606bf74218c
TLSH
T13FE0232C887F031D4B4A5704FD2A4495552845C4D023139B3A931F645534098F747C1F
MD5 SHA1 SHA512 TLSH

Weasel/pjalters.met

SHA256 0d96c179e8115645bdf9c9dcd1c20ad42109b1bf91e281e9e5dd90b10e10a114
MD5 f9afe5ac014b5ddf0b464c85d02d283d
SHA1 dd37d447492d3eb12b080f36d5d601609b632c1f
SHA512 9dc9a8e52953c56a57477457316fbc9411999d9420e7dbc1a2fb2585f06df9d6286308bff1bf24a0f9f6d0e47709d9b816779c39fc06b2575cf873a7dfc444a3
SSDEEP 12288:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4n9ffkljQbuPxTugi1BST1TCmyK8NDnHbdi:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4nW
TLSH
T12DA412BD6864832ABF45CAD22823C98032F958EF657935D307F9005D76A79F09D92DF0
MD5 SHA1 SHA512 SSDEEP TLSH

Weasel/pseudopode.ini

SHA256 0390c92b8cf2e80fb16d61408465883b4a9343acd899fdfdefc5912f9dddc12e
MD5 c061f9cc4b28b383707b7e97fdcbfc83
SHA1 eb8ccd99fb4b15844bf4202483a68cbbb9d13981
SHA512 5072e629c2e73dbfc7a1b67a350a65490f3a9ac60dc23b19cd562d1e8a0ee14ea021ae0e91d9849330eaf212c9e5b10e315df567d4fe3dc6fa6a7e19a6b074c7
TLSH
T179F062B0C935C9644FB6A20AF6530516CA7C4E07A15736F2B8D4434A4605BCCA1A7A9E
MD5 SHA1 SHA512 TLSH

Weasel/transudes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Witchcraft.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

agglomeratets.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

badehusenes.bih

SHA256 05d7309de60bc153a3709cb6b64be9d2901412a95e74136548b5610198b1eb93
MD5 b0fb4a8d920068765529d995753b200f
SHA1 31b1342270ba6489046ce478bf36ffea9d72a81d
SHA512 d076d02c5c5b37d21ba3b198c4fd1b256f8f71524433a841ed3202056162f889005564a3cfc42bc325cc13db3e3d097e548261c341daa3afb156763e25514984
SSDEEP 768:PnzBjpWX5RMwgDah9rXDZpfaHsmKSWyajHhon2VF+teJr:1GwwgMrrHjEep
TLSH
T17493E170BF3B7219CC968E054121600F9A3697798859DB6E765E30278238B650F63F36
MD5 SHA1 SHA512 SSDEEP TLSH

betingelsesstningens.txt

SHA256 78d13e7227960dd16096c78c46f7aeb3d25388e0b867e5a33c5676bae3ed92cd
MD5 91d6328ed60b4e4e660b5888199479e1
SHA1 c8d3bed5674983b91cecd557590e1964029e5724
SHA512 8c20e4239c4602d07e94918fcdae97cd8002a095f37a5c838fc08df3815253704907343c51e0281d9564fdcd20050aa746d3b5a6fc3947670562e3eaf82dd581
TLSH
T1090144808978164E9EFA2338BD233A72533409244135DC2E44DD4688141744CF3FEE4B
MD5 SHA1 SHA512 TLSH

predicted.Tei

SHA256 c3ecd6722b30057112d00c3ef0d99a541cc0e3a10a4ece64b931deeed0af45fd
MD5 010292a16aa5180789e98b3d7496107e
SHA1 ee382552f51d91373618f7e7411a069a6d812780
SHA512 0c947ef98b8bbf2a88825660cfbb895d3e8e2d2f2bf15e1753b4acbda14b29c0ac3e6a60bce17f48210709bd4440253976674cc19fab69e83c592fc61ee18058
SSDEEP 768:avNh9qkJ7zWLk1IGocu8xgXTXvUocQl8mMRKpVsKA1xtMV6592Q7O5LVO:CrqkJemFF4vEQl8mMopWKsxtMEg8OVO
TLSH
T10E33C0466B4D287545EA036EB2968A1C0FB58C3EC6A7D897D14B137E73C638C093EBD4
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

f2a14ab6b9d45255710fe9541e761de772ba40370628d6608914e6d47cffba9f.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

Circumlental.Gul

Fideistic.ini

Gelded173.ari

Pigments/bipenniform.jpg

Pigments/collates.txt

Pigments/kommunevalgenes.txt

Politistyrken.ini

Weasel/letfrdighedernes.jpg

Weasel/pensionskasse.txt

Weasel/pjalters.met

Weasel/pseudopode.ini

Weasel/transudes.jpg

Witchcraft.jpg

agglomeratets.jpg

badehusenes.bih

betingelsesstningens.txt

predicted.Tei