541cc19ba90260c2b9db223d534f68de21c74569c3f48898037007ed2e490517[.]exe

resource
541cc19ba90260c2b9db223d534f68de21c74569c3f48898037007ed2e490517.exe

541cc19ba90260c2b9db223d534f68de21c74569c3f48898037007ed2e490517.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 541cc19ba90260c2b9db223d534f68de21c74569c3f48898037007ed2e490517
MD5 b6ba9deb74668899181696eaffc3bd0b
SHA1 54b50d1259a6c0e3bf91097b6028d2d0521c8893
SHA512 859dc12cc5e0b73f17c602366198ed87c1914417c15c31bb42f12ae39a4717fe44fb288b932d7f86956fe96786d2a17603f7685ab6283877fa5fded20261e50c
SSDEEP 12288:JXtKNXnkMGfVOwFMtvBm0iCbhZYX9Xnk998PjEBtHkgfjqcIxzgAkmmJt2PJYZ4x:JXtKNkMGAwFMj3lZYXZtEBtHdfjq7xh3
TLSH
T14CD42324FA69F612D35A093211B6D3F55FA3E332016E068FBF22CF6E7E65910D934909
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bf:e5:65:ed:6d:e5:9e:a9:43:c4:3e:a5:5d:23:ea:7b:ad:7d:83:06:f2:6c:99:50:ce:69:35:80:c4:27:cb:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kennelly,O=Kennelly,L=Greenbush,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c0d4a6f6e65404d6f6e65732e4661

Chains

Aug 21, 2026

CN=Kennelly,O=Kennelly,L=Greenbush,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c0d4a6f6e65404d6f6e65732e4661

Minor OS version

0

Major OS version

4

Entry point

13564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Demarker/stridigheder.txt

SHA256 48ad7164a7d0b88f5aa04297abc8a38bc9d834728ba103eb84c7abf6e3e724d7
MD5 6636e4946b9a9880d2b3f974c2b643d8
SHA1 9305a43911d9613a2e22d8572ed4ca575cdcdf07
SHA512 27e2815af337e0ad2e3fbb86aa9c54ac908dab3743d9223b8dfba605ee7b094330d16baee03ce094f3d09b9eaf8cab431ad22c8674466455fb5467867d1ce2e7
TLSH
T129D0238CD4021C56055D07051EE404954CFD31550BE109D6EEF54371348248509B945D
MD5 SHA1 SHA512 TLSH

Demarker/unrational.wau

SHA256 51761b507d5cebb84d6596197b61cb00fc7165008cf5b52c705c9e02f589b0b7
MD5 22ed7d1bbaeae66b8d44da383acab79d
SHA1 a46cf37c6ebb33b578f71e207356d430a74a073c
SHA512 334142fac958d9e8eda56816fa4c266fd9c4fb202cc40285d66ada898cd0115de98dc0447153efad5821a9b888c94c033e9611cec66970025f6a0554a1009bbe
SSDEEP 96:r72yZ+0OKI4qeBfok118baiAWKZuE5T2dWlmqaUwROyFV9bEEYj1qYjBQIZQbeAZ:riyUTaAbAlcE5T22mvUnjOIgz
TLSH
T1DDB34E96EB959BCC7A443191918525C68DB3BAB306FD09A0450FBD40485701971517E1
MD5 SHA1 SHA512 SSDEEP TLSH

Demarker/zipppiest.jpg

SHA256 09d683b08223dfc7da2546dfb2ea6eac3938371b56b9d77cfdbfaf4bf330d45b
MD5 e9234a3aa1b87476de81b4ce45beb50b
SHA1 d825cd9097cb6545f154a95c9c7c3a753f7cafd8
SHA512 459bedebe7927584e065c52444b36875338e5d79cba9087a6adce16b09907a86c332ded2b064dca2fa090bb2b90bd3d0cfabd375ac5a2e8b802630e2ae7792e7
SSDEEP 768:HS1JvnMOng9j3YFuQxmAHizAP07UUsD/0ZKpukRi+guMDXJHrTT6/Yk3M:HSS6HEZhsD/hHguMDo8
TLSH
T190D2F13E97B30420DFC594275637AC53B89E82D53ABE1268B856CE0D0AD443E187DF64
MD5 SHA1 SHA512 SSDEEP TLSH

Eneherskernes.Aae

SHA256 2738925700f7f34040ca9b79c45802d25b91a097ec4398471e1f6afefca327ae
MD5 c1a28f4a460d41da4d2cb165fe27860f
SHA1 794e72bd6e61dedfc4d8c4a68550c7556aaa0d05
SHA512 7f6c837b1af3c550fb9d2699d188fc078aace74ade407000b9a381c83c5f829739b612cfb1f9f8c1ed2830c034cd4528c78b14c8f56585ca8bd7d1ad1b2e8e2e
SSDEEP 1536:4/sCKvRIdKvl8pzbdcZ07MAwvlfOaI+4OVLobleJXH7av9VTCO:wsCAUK9e6Z07dw9fOWule1baLD
TLSH
T10063D0D0AF150A7E5A57279EEC8F0EA10F280E28C475C4F5DB6F129B12C26F9127CA5D
MD5 SHA1 SHA512 SSDEEP TLSH

Pelta.jpg

SHA256 eb623e62367e029fd4bc27766b2cc499e723e1fea06962dbeaa3ccfb419bf7b6
MD5 cbfef95f85214cbba5cb300a95c274bb
SHA1 aca01146bac0c279d6e68379d3588cb514dc0293
SHA512 a67864d212d86b36c5def7e891d411ace198e71128d9578306aa8782efcc605c90502fbf614047fc2e14e71b39db130e27742f52f9498807cacf4ee154652762
SSDEEP 96:Rh2EZ8zOxV7rwMeFqzeh6pFM5z/YlU1oyBA4T01sPZIDmRQ1ZEQog:L2i8zgvK88uFkoyxysPZIDmSZjh
TLSH
T164D17EAB66A3A4018F7701758A0D6DAA038E9B8B95863F3D4C3801E8CF55DF68D5C9D8
MD5 SHA1 SHA512 SSDEEP TLSH

Skfulds.Kre

SHA256 c8f9729e392f1da81bfce4b6f4c42352b98985d03ae1107bb5ec17dcfa6e9752
MD5 195cf35d813253c4c6430cb838169191
SHA1 eb21e9f7d4770c7daa9f6784cf10753b830c23b5
SHA512 acda33eeec102979ee37a75149b56d8ab87620821f84af5d00bc4c0d1728aee99ae1599a1006f427f64105cd57dad6314d9a8edb269e12097fcb4f895bf01911
SSDEEP 12288:BCIW+jEzSlasnbETWNnqoeVxqcWy2e3P8fm0CP:BQ+lasnOW9qoC3Wy2r+r
TLSH
T1A1C40190C9A11A5AF7D928B60553F50E5F315BE8CD30AFC9A18435A678D083770DFBB8
MD5 SHA1 SHA512 SSDEEP TLSH

abanet.jpg

SHA256 a0f573e43995f655bf989716e6159faf86a4241f6c71c6ed63916bb9f2b69bb0
MD5 ee173860278a93e0e9863ecb9b5e1c6c
SHA1 75b4d93acd76b428fe5d8b7d007b2bed0b754695
SHA512 e6bde88e79a4a16513f0b83a6c5bfc79ea3271e602f8979953dc871f947e64dfbf0a71f41d0021a85b669193977e1e0f85e9f01aa150e8d7ec4568f8574e8e2f
TLSH
T1D7413A3E8F4882C2BB32BBFE015E3723C044E5D17BB872321B62CB66C416CB59498015
MD5 SHA1 SHA512 TLSH

laanende.hai

SHA256 46cab41fddc0e3dbd95866748ca0d59b9000b1ab2122ca7b8f7a5f4989d01f6a
MD5 230c4ff00efef98e2abf962311f1c92d
SHA1 dd8210f3098fd2d00c0193e4da4173a04b8a8241
SHA512 cec56bb26eb23f4f911c55eb1aada95907220d304d79f03d618794c30b98a265c995f0ea540e81afd16fa597f057ceecfe47fc60810a94c04cb34db7f43f5b47
SSDEEP 384:6SJgYE95lJs5FBlbLOLyBZi1pZbjMmxtnzbojbCISLjYfyBqx1:rglH/OSwUZ0IVb3/AqqD
TLSH
T1DE147CAF86C056F69B17CE54D404D62E9A660AD2B3584060558338C7FCC3EBA6AFB602
MD5 SHA1 SHA512 SSDEEP TLSH

orthohydrogen.ini

SHA256 3d91d5856a972ba13a7674f6a7f9b9a4312ab707f95e5b1834824cd4d669fe41
MD5 923ea2f913552e15a4786a1ceba73ed2
SHA1 5fb69a77a637ca302c5ce3d452db6dd4c8fd0da2
SHA512 e4b92e07bcabe725c1ad5f8b98b7b5e9274963b4297608cb8bed54c15022bab0340a25c34df1374d5764beb71944e548a357785f148f6a8de59ed8210b18a1ba
TLSH
T119F0D4158335C4D0593F87D03F64230850CE1C728222144B664D476C51C02F457DF74A
MD5 SHA1 SHA512 TLSH

parodial.txt

SHA256 a852191da430459c6b9dfa4295fb3090b6417ec7819411d687656ff584e80a12
MD5 04bd685ccec64130fd01803117bbddaf
SHA1 b58d6a04a95fbd194504b1ab9923c42d2cc70ae0
SHA512 ef31b9b80e37faf796140740f0587a2acb360f070d36530f234a3d9318ea417d25cdfcdfef2cdfe9de7c58aa02e6b47a2f653ff0778243911f00da8bdc0e3a95
TLSH
T129F02B70D355049D5D0757C59C027454484C147E52D7A55470FD72DB20D313CC3BC38D
MD5 SHA1 SHA512 TLSH

prkende.aab

SHA256 70e05435e00395bb610c053d23750af3622916a8bac7267879a56bcca100d078
MD5 229edb153f6c07f854d5e77c9b753b56
SHA1 fb1fce256703b1626b37e6e072cf05fc1475f14d
SHA512 9696370b593ffad35edd4e39a51efe71bce5f34208c26cb66a4140a46100d3665c61597b200df3d7e763d4f014a34a6edeb97da9fcdeba476b55912ca972a46c
SSDEEP 96:+GjGEDQgJs3eHjVCEsRAL8OUiHlB742Oizyfe+j4KG:RjGyQl313aUiL7XOizrrKG
TLSH
T15D834CDAC4A02E6CB0F80C4F9756790B1192B1B8C635CE25AC78D1530A1DFD1292560F
MD5 SHA1 SHA512 SSDEEP TLSH

retsgrundstningers.log

SHA256 eaac8f1a60802ed642cee3b0f4878761d0fa1d8f0dec235deb46394e39d70494
MD5 3e94e23be6fb0da6579d07beaae3a08d
SHA1 d30b52bf12a3b5ec2e8564a61639d9fdd50a0e0b
SHA512 5782a1d30ea6e4d627cac2c9413e3575a491e041bfba902d2830d68ea34a0d7732ac2529a5bd0c842bdcd717c7bc5e2784f651dd723c84153db93b74aee77f40
SSDEEP 96:f04VxB+waOe3chzRf1qoozrxI4LwWDv+UEDgM52ZfH+gorix0Ku9uaG3ORI:M4t1cxnWFsM2YAd
TLSH
T112248E3945BCE64C3D9B73CAAA2D21F435C21E957F409B5D4B693E9D33F9A981410343
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer