9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8.exe

9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8
MD5 786fa6e98c7910b8fda4668f469b5355
SHA1 6e112a867f5189ea9ad9a2ded31b2ec12b1595db
SHA512 a3f2f00acd0e50ee96d271153cccb85a523ffb493c1a91e41e3d3b2413010afb5ad8fa3e09816d12b2a29a9753691ff5ab69e640e170b05642d702302b6a0bc0
SSDEEP 24576:zfLE6f5nXjXzldlMrn3hH6KY+eAZkJGrI7+nbBOh7:bdfZXDzblihH6KB1aJGndOV
TLSH
T16F25126DB52072B1D42DC7734A25DFDD3B610D21A3F078ABB291373586B0220D6BAB76
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

05:f9:f1:c7:18:89:46:b7:ae:ef:57:9b:7c:c8:9e:51:71:fe:f2:06:b7:6b:b8:c7:d3:5a:a9:a5:88:68:fb:a2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Cobeliever,OU=Evasible Firklverne\ ,O=Cobeliever,C=FR,1.2.840.113549.1.9.1=#0c2164656c74696473616e737474656c7365734046616e6174696369736d732e4d6172

Chains

Aug 21, 2026

CN=Cobeliever,OU=Evasible Firklverne\ ,O=Cobeliever,C=FR,1.2.840.113549.1.9.1=#0c2164656c74696473616e737474656c7365734046616e6174696369736d732e4d6172

Minor OS version

0

Major OS version

4

Entry point

13618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
TLSH
T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Hurricanize211.did

SHA256 e16f309a8e9db66d9f8f45669b3bf28b36d16ee48f6287836a149c15c5ce0007
MD5 5fd967a0758af46fb037c0128417e118
SHA1 50b4c9ac67bad33b6140cb2c296d08a64a9c6d55
SHA512 32a9160afa9e86996723512d77e6bd2e8d51bd104f0983fa4c2f72692d9adc18a71fec3ef7fc3eedcf20aa42d62408c62b4d9cdde44ba219c9bb4b007a4c7f1f
SSDEEP 1536:3Mx5tcS5ydT5Npl4vg0cJSMQUzbLwLqqpuQKa5a37pHBDkkk10SF6bKcfuTqbCdn:XX6
TLSH
T10076232B475AC013ADA3E11C3D17BC7CAB992CB81F850520475E865BBA33C62692F47F
MD5 SHA1 SHA512 SSDEEP TLSH

Meaty/Uningenuity246/boon.txt

SHA256 3e95c2cb3b65a5498f746442f5038d74aa37b291d59f457f74ab101602abacfa
MD5 1ebf1f862d643c5df08d61c21291b693
SHA1 a3f71d23c703d787197c5a6046f6ac5c9be19002
SHA512 50b072c9719d7c909ed6afd285e1a2686c6e91bd584ba865617f757e25b14cb381b388b596ea8d88d2d8642951d17437d05b52d71a6a47837ee0433ab16722d2
TLSH
T1DCF075D0E723AC3A4E5FF9D837A930454FFA0454A6348320F84F303B365009153F2894
MD5 SHA1 SHA512 TLSH

Meaty/Uningenuity246/cupola.jpg

SHA256 a24d4b5eda436ab4710048cde8c825c3fba591e008ae49acb02f53c654c47726
MD5 e4682f1abb919732f6a523460e0eab30
SHA1 11dca83ae9ca7f7c42c2c8b866c03444f35be3f0
SHA512 5032ff0b48430889043b7d5a918a9982c9cc6b5a0dc3bdafe5053d98b2acf13e6c50f3afe3b5f0b8ec629624a5555810d1afef5a82913a00c9ae6ec8b3172a7c
SSDEEP 192:L5iItAQCIKUYU1FCDiFYWVXmR864Ti5QzMMwXPUFyK:lHCIK56FCDsFZ5OjP2yK
TLSH
T1D2F19FD9865CB6D7C7538BA50F87E199A0C60C98624AF830EE8090AEC560CF1C1DEA67
MD5 SHA1 SHA512 SSDEEP TLSH

Meaty/Uningenuity246/deuteriums.car

SHA256 a15ca673b79239cde2e11305e3054515729a60fc312e0e6c33086c2c4118b429
MD5 6aba03912a9feaf839309b0a8e1a2c2e
SHA1 c8b38c6a1504ac6ac56f53b35f90111b00758079
SHA512 407d5050ff120916703f8ed4fb03d4fc15de6d5929b1948058d4f8e16261129d645d84df829610d44d4ba18405ce90a6e932fac556ef5e69a8c050be187b7413
SSDEEP 1536:8Nn7URXqzKbWZ41Ml0KRywy0OGcScFWRfAEojn9FH4bql8UZ:z
TLSH
T138D4D1C87262DBD812B0BB20875FCA70B13C64504F6ED7A677B0833A767A4C0394A56B
MD5 SHA1 SHA512 SSDEEP TLSH

Meaty/Uningenuity246/iodomercurate.con

SHA256 905a229dcb1bd4b008b2717cd8ba88ab791cf351253e031989e18d957fc96b4e
MD5 cac9f6a669bb522ef69dc745685cae8e
SHA1 b235ef4afab4a4768b0754da679581f7cbd8528f
SHA512 414bb6365ba43ed0aa56966dd7b4a82eae1baafed347ab706809428f31200dcb4f72ec1e650c91efc4b9f04744d928324aaec003d25d4b7069add7e3b58cadb1
SSDEEP 6144:zzdest5w8X3hrU4xAhI5IBGqk3hl8KiS0ofkyiHVJJmpCnwyy2MZADSNQmTfdaTU:Wtw
TLSH
T1C87622C64B929200799B7D63A55608421BF03C07E4557CE49F9DCFE0B72A0D3562BEBE
MD5 SHA1 SHA512 SSDEEP TLSH

Meaty/Uningenuity246/retrograded.ini

SHA256 0eeea8d3a331acb617f179f8f136e1f80ccf0ad198ee35661f356282bfdd9c66
MD5 1910d7b8759e986552d675e2cc924573
SHA1 3e317427df4e5e71d3a57022f8011ef9f5fe1151
SHA512 1d84020cecabe270baf1432c227f7babfc69680c04520a14f724c6f73636537d7eedad8d70af06a73482c9f3d17fed3b45748ee2d6eae189dd075f00897bd3a8
TLSH
T177E07DD91C8BA3573BAA56C939F30AE110A6C941C7014703704A976F2FC256E87FB76C
MD5 SHA1 SHA512 TLSH

Meaty/Uningenuity246/rumfartj.txt

SHA256 758bb016eae5917c5bf5d111a7e9f2f1163658d7935d646cabc5e20908f22771
MD5 eb8d00cfc0f8961c00528c07006b3047
SHA1 5a2a6ed59b95b212c4f5ed3494416e098eb56d6f
SHA512 4fbf5f374af2000df8edce92adf130a760ed553fbbe3f9ac4372cd6d5f3eeeacf1811290a1bebdf13d9a4bf75574a5907e29639acf0076be1a838c83a87fffdb
TLSH
T19DF054BDBD2730E92C8322AF3004CD880187C875642211137DC8078C0343CFA62B530F
MD5 SHA1 SHA512 TLSH

Meaty/Uningenuity246/scenemesterens.txt

SHA256 5f9959cbaddf62417013adaa7f10a8eeb978bb4db25dec63daf31cb1d890fd54
MD5 ad0cabf76f272e081518d878ec221de2
SHA1 36a69c1296456ca08293af1df4d2ceaaeed1ba3a
SHA512 e41588c2780e6b1694730140d77c0e13cf467bab8df9c8b4687e2ef41bebf6e2c6cd45eb43011dd90cc706739645a694f97cc901ddd84de4e0c4c861214cd82a
TLSH
T198E0C0CD9527668C13B90F5E606F2CD8855D29D4805709CF7E746B0C6A2A62E2CEB4CD
MD5 SHA1 SHA512 TLSH

Meaty/Uningenuity246/shopwear.jpg

SHA256 16552c5ae4e71a4c80f6e161fdc8de46a0e1b5c4265cdd164daf1fce1b01944f
MD5 e65cbee516b200db8dcc1e26b18336b2
SHA1 25107ad6870200aaf493c02f8d3817e538f7a3da
SHA512 c54a895968cc850163c1b1d028bd99e0b506d4797f22f084d1258ef77dfb3c1aae197a1598e237cd4f5004133420a2948db2966895cbb53283a5f6f1b91e2a68
SSDEEP 192:LiM/+qXHGQckHRccVqy56Vu51tqO9mvq/4s8:W69NYaqy56Vu5eImvql8
TLSH
T175D18C3EAF0E3A4BEFA2DA7C1D483BD70B9C284015B420351FE6568443D0D75CE98728
MD5 SHA1 SHA512 SSDEEP TLSH

Meaty/Uningenuity246/unamicably.txt

SHA256 b8e9be443238dde15229354e248012c6ead0bb48286f542564436c8a06c22e50
MD5 b4583aab7ce3e222081d8e079b3aa537
SHA1 04f50fc51a2369b6eb2becf534a6bf0671d35f52
SHA512 a22cc2c18d8b61c1a6f0a44c729f1ba6c6f5039ebb277522b91d9f0faf650723ca37c33c1e62ad907e0182fcddf1a362e6635640570a1a1456f5607e9649e886
TLSH
T153F00250C3101D3A4D665347A46E05F11F6CA6362D5E1051CD8498CEB68B9694125F37
MD5 SHA1 SHA512 TLSH

Meaty/bekrigelses.lse

SHA256 969c18a1175812d215e98c420c7bb5c62ef5f880ee2bb9da7cbd2be970080dfc
MD5 2c26101a493421a39264e32eec896562
SHA1 bbea048e3d89d5592ec7efc229d68c71c03672af
SHA512 b3fb2191a9010b079af274b0e1ee653676be45d3baa76edb53d262532f3c52385f06f8b470c1f159ac4d9625fa2b79d155be7b9eceab7dcecb16f0fa81de1f66
SSDEEP 1536:CupRWsr8rsdg5dCpg5CmhIYZtDvLNkQ/hU55TtXc1p5iGDowIjxiCvqHzixWq2zI:B
TLSH
T19DA5028134F80CF391BDDEC029D956BA9D48267E78AD7E25D04770FBDA1A47E8603316
MD5 SHA1 SHA512 SSDEEP TLSH

Ostepindes

SHA256 586ab7acdfcaecd515626158887bccd9bb4b7774e9ecc829952c2fd73d6b5d2e
MD5 ad50ff19e63d1ce0d7dfd4a6d9b25ccc
SHA1 b19b1ab1f771a22943a9a634e0ae79f5d9a67aca
SHA512 e7ad8afee72c35e293bc39b19e0a2dd659521a47619c282908fb93798b8e4019d4e35ad712104cdc8513cb2befab3ba3d7f0957d0fa0a3454301a9efa132c16f
SSDEEP 3072:TQriF+yY52tR2/2DtsrlgpylL181F8PxNulckVBO0Be9A3bt1BcJM5WlR+W8PQzs:ErpEnDvyliHITOlBP3R1FWlo6FzRI
TLSH
T1CD24E1423A989FEFC4CCB4FB96FCD20EC3F48B7616CD1452B2E1D609D931A4121656EA
MD5 SHA1 SHA512 SSDEEP TLSH

awarder.txt

SHA256 e3b60f2f09127cd7df05efd0166b20571ae59152a219b2f3baacba4911f85b28
MD5 5f2f9cd73186766bf85b6e4a25598dbe
SHA1 9c9df5a519e7e18d1be7d8886cf2cf2f7ab7a1af
SHA512 1702f2820f9f4bc06afaf400c46f8d9f9a8a839d1eaff04cdf235511bfa0cf5d2da50dc3a5f493201111283f006b84aa067a2691cea2a1f3e26573ae46446661
TLSH
T132D0979C6C17247E1220830A00D82B5FDDAF2A11DAF38230B4A2A621008F3DED00DF4A
MD5 SHA1 SHA512 TLSH

9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Hurricanize211.did

Meaty/Uningenuity246/boon.txt

Meaty/Uningenuity246/cupola.jpg

Meaty/Uningenuity246/deuteriums.car

Meaty/Uningenuity246/iodomercurate.con

Meaty/Uningenuity246/retrograded.ini

Meaty/Uningenuity246/rumfartj.txt

Meaty/Uningenuity246/scenemesterens.txt

Meaty/Uningenuity246/shopwear.jpg

Meaty/Uningenuity246/unamicably.txt

Meaty/bekrigelses.lse

Ostepindes

awarder.txt

Sharing

General

Malware Config

Signatures

File Explorer

9082b4c986dabd4cf4d2014dd5cde755707319fd5be80382f106e88f2606d3e8.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Hurricanize211.did

Meaty/Uningenuity246/boon.txt

Meaty/Uningenuity246/cupola.jpg

Meaty/Uningenuity246/deuteriums.car

Meaty/Uningenuity246/iodomercurate.con

Meaty/Uningenuity246/retrograded.ini

Meaty/Uningenuity246/rumfartj.txt

Meaty/Uningenuity246/scenemesterens.txt

Meaty/Uningenuity246/shopwear.jpg

Meaty/Uningenuity246/unamicably.txt

Meaty/bekrigelses.lse

Ostepindes

awarder.txt