8101 Fatura 4883- 2026-8[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
8101 Fatura 4883- 2026-8.exe

8101 Fatura 4883- 2026-8.exe

IMPHASH 9be4f90f50c714bc00cc8beb2e137299
SHA256 744437d93633c87382f9d1a1fdf0c1a3a908c5f9e0435bb480771dbdc0282fae
MD5 895e427449556e15d357670e9e499dcb
SHA1 a51a18b3908126f1f1c11895e92c1d65230903be
SHA512 1df4c47c6b7b54f086897542e8724bcf340d517a7472827992ee5c7e73f4aa3298a095475444760d5e0150ed63f30ca081417cfa7cdbd0494345a47bb7328bff
SSDEEP 24576:La2MB8zNnVoYED6xpoInKiwtWlPmSenEz+T10lpfC7Mh8:u2MuzNnV4GSiwtWsnEz+ulpCgh
TLSH
T1EA551255F64171FCCC34CCB475A250735AB47C3AC990699B258DF3AE2CB18B2EA3E258
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5f:d5:c1:9a:31:9c:18:50:25:f1:75:3f:d6:d0:72:fb:95:d2:b0:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Seadrome,OU=Petitionere Helterollen Recreationist\ ,O=Seadrome,C=DE

Chains

Sep 13, 2026

CN=Seadrome,OU=Petitionere Helterollen Recreationist\ ,O=Seadrome,C=DE

Minor OS version

1

Major OS version

5

Entry point

17331

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyExW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceExW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetUserDefaultUILanguage GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHCLSIDFromString SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetAsyncKeyState GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongPtrW GetWindowRect InvalidateRect IsDlgButtonChecked IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongPtrW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfW wvsprintfW

Name

.text

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

368B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

284KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

696KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

237KB

Virtual Size

237KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

$PLUGINSDIR/System.dll

IMPHASH cf8eee620b3371ff06e99c34f39ea84c
SHA256 2c39c42e16dc819c7b7a4a136bac7e0df898e2c1d4bcd26d41ba2922bfd89276
MD5 24936b0f61dc04401fcd1c2675235a8f
SHA1 cafa6dbf5ee820de30d6651fac8a0625cc85e0e6
SHA512 f82fb8fc75f057053422d0d5e3d2d98f31b205b9ff0d9b6533bb24f255b94de5bc7b3d8ab3eee2d5ba8e4f1f6b9346c0db92f357c0b994d99e5b20540ce8d698
SSDEEP 384:lZ2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvHy1Q:lr96YIrx7lC7vU/kaG9uLmCdb
TLSH
T139B24C07F38398BFC50BC17186EF5772AA32BE211B616F6F1220F5756E24E90871DA18
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12726

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

916B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Heteraxial/Cigarettnders

SHA256 369ceafeff136068bbf0285f505df3f4f665bf723bbc3eaeaa0d334ca0007b58
MD5 bb2623004f38cc5536c7540cf5ddd4e3
SHA1 5d1b5b98a2d32c03f94a1ca7697af6aed46b0bc8
SHA512 3cd250a5b3319ea98d41b73e5c0288f5dea2f55ed3631e2ef97d498bac34af93ab4dfd6adee86682cd2fb9b88062b439a9dc75875fafdbd772496b8a2b226438
SSDEEP 6144:HyH8bjCjCW8W2hV7g2vrOdaDhvfq1NKPFwYj4fT6VLABmTkymFq:HyajCv+7Rvfq1NK9wYjr13gJFq
TLSH
T14684BF5AC62AA105C852C33876CB64C076F6DB389EADC3055689EF441C87FE96F64C3E
MD5 SHA1 SHA512 SSDEEP TLSH

Heteraxial/Cystaster.ini

SHA256 879f7d133d5d5a9ac01f76ec747c7189d1e6ab812d251dfbf8ae1b03b7eac9d3
MD5 4da20e536046845385aceb376e07c7a2
SHA1 4a186febcf8c976aa7c5eaed026f02a6a5260a2e
SHA512 faecad431d552f0628994a20ce32c540a6cdc64f8704046bacba1c587079fa89d4d477f1fa7b087eca2d43cd4e76b0960c5828ea19559ae3dd2c0ff86e098523
TLSH
T16DE0784D58C3249017C7578BBD247F51C3571F75C01B11047617D7677051C35165740F
MD5 SHA1 SHA512 TLSH

Heteraxial/Galega

SHA256 518282564ea027d0867c9f8422416c19db9e322b13df2d57345505ebd4023eda
MD5 101b42f072becca16b154e173ecef9e5
SHA1 f9ff4eb557096bb6c34dd4539a960dacb600f2f8
SHA512 ff7f45b8474535ad6def78877a507ce80d1d911a4b1784d67d1304118d8b8a858bf94d76041cc502aa8345214eb2a02c4dfd2bd1376f41541a4e1c50ba3d8878
SSDEEP 768:gJX8XGhdpMYPjFMENaoS5Xe0zyKIOjncglstP9A0VuFhBJs1kyM1Bb:pXodiYZ96xDIulml8fn
TLSH
T1B6E2725071C98DE4F61A5988EA74FFB2027339739FCA1CD22324B6018EBE9513A4D95F
MD5 SHA1 SHA512 SSDEEP TLSH

Heteraxial/Hams.gen

SHA256 c52acc048bdf1a496204f0492aabb92092feea6cb43b2c7db47d4e442360c805
MD5 46f5be2b58c3e18918d72ac2e891212e
SHA1 cc4f61086c42fb02168fab14b63f9946545a6bef
SHA512 c7c81f654a5eda4112ae68f670ffa936a3984dc14efd78d320ca509b0d0cd0f9a954d8f6516fadfff1293c4250f9a53e0f9aae51aa763ef5e0516db0f26718b2
SSDEEP 384:c9HS+2v1Nbo0qWXX74C5EKFfCiPex+49UAAwVnVFtOkbVTOIk7woMTNvQ9ciiT+V:JmJiyQ/8vEo0RX
TLSH
T18F4612C0D45EBFBB88E98B8889D1C9169D0273F6E11B121DEC3E0854E35CD65AB2B715
MD5 SHA1 SHA512 SSDEEP TLSH

Heteraxial/Ophug/personagens.ble

SHA256 52d1229c9a06e32b1eecea2f9a93fe3d9e21fa63acab7f2063423b2e22c02e07
MD5 20cb5c912ed93c032b542fe9fab2218a
SHA1 a7a2e16465f6d1c1c2b13509a8f17ba33f459ded
SHA512 f46918fc4be9ad9348bbb20e38d1d4bdcbb164ed1030c4499b4bd66f45ab82db3c790373b8ec9826a4b5aebfe840e7e823227ba9d4941cf760eebcd5a220f904
SSDEEP 384:bLLLSirNOUVuuWGo6nTxTNlhh3x2mWPVWgZVv+qvMqT35KSSRqeD76Pfpes03iC3:XvXzPbw+2Z0/8Acm1P
TLSH
T11746128368C8A956DD37723B6F925DE4DC0BDF1AA56BB221F23E367C753425402CE089
MD5 SHA1 SHA512 SSDEEP TLSH

Heteraxial/forlbsmodellen.gel

SHA256 eca034d3a30cf9ee20dac2396767bb817f5e5f42b6231159c02fe59aee70b1d1
MD5 cad386fd4c578128736932dc24cf27d1
SHA1 235cccb9c6837a261b386eb08d20f2a74b0bc064
SHA512 4896055cc37b378dd196d25605525b23f52efc662e088abf9c78157ca8ba74c52faa55378859d82b8d663e3a89cab19013110617fc4d8ab4347c260706be5ad8
SSDEEP 1536:NGHAoD3PYbM29uw6T4N74qUDUSMXn5xSNwKqp1Zh2jY+7voOuS0zhYGgDVSEJO/l:ZBdr
TLSH
T1BD862375796B265C16D90B20DC2EB58FECBE1FDB01BFA20D72042687083512DA57A39B
MD5 SHA1 SHA512 SSDEEP TLSH

Heteraxial/iodising.ini

SHA256 13435f02aa80941bb385eab063d1938b1b89ee49c8f8b71979b743c6bdcbe3a9
MD5 e649c72690147515decd2783077dadaf
SHA1 2eea1e1817c880c22d7f83784aa67b055ba3e769
SHA512 3e5592fff430d1034847db031d25ecee04adceda384f5169384de679279332f198b9fc19c523a7082dc1aa57ca8ba3f58f5424b919e7851aec5a788556f44ad4
TLSH
T102D075C10301905C5A82444CF62CB2E0838682220E204E2886F0C30FB3413DBC66683C
MD5 SHA1 SHA512 TLSH

Heteraxial/palolos.txt

SHA256 a33532e98efdddaf570429f7f582e7617d29fb2f58f8b8dd5d82817b4708bbbc
MD5 139127bfe485fd89bc4fd682408ff3fb
SHA1 503643a01099e675118fe98829e2649a0f494d6d
SHA512 0e1a5cf76bfc4e50242d98613750ffd997cc7445a527691917680bba88f74fba7e915a1fa86b54fd96a5fc2d63451cb729bca5a495f7fae021a7e528d1535a4b
TLSH
T1AF014D9AADC72474AB0B13CDEA400F9048BDCA58C8182832BAE8230DA02A4ACD1D431D
MD5 SHA1 SHA512 TLSH

udvisende.txt

SHA256 1ef5632c85fffbc4ea59f30af099cb81d75b649cba657e06e1b3a571d2553723
MD5 25368180139a557ae2d793f54b5b976d
SHA1 8b0d730961656d4cb8035b291baf88714af54f86
SHA512 e27ce140f48c15395dd11a77005858327f331e100f28163c0aa8d3365f3dbad17af06ce8765dc250730c5c63639310c9570d18cdfdca593e43b34c42ffd8a694
TLSH
T1AED02B1A93425D6D9B9884FFF4866C46C90AD505817B12A0A057834C47B801D037C02C
MD5 SHA1 SHA512 TLSH

wisecrack.ini

SHA256 02d31f1974f72744d0192f9b908716a97b511596097434cdc6e2424131c3b2f0
MD5 49cf7c3c172936a43bd6c4520d725e8e
SHA1 4caffa82da08779e28afda629254dcb783bbad4b
SHA512 2564a8a72ad0fc182b9b6c16dadd74fa923ecd40f866af3475a172f9f758b182981a3cd2851631b14d9fff19208e47c52d4ff7eef7ae85bb957637250882ef45
TLSH
T1FAE0EB0B323E0B0CDFA10B77D8E01D840230814AA082C10A94EF430C6C12E81F93F92D
MD5 SHA1 SHA512 TLSH

8101 Fatura 4883- 2026-8.exe

PE Signature issue

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

Heteraxial/Cigarettnders

Heteraxial/Cystaster.ini

Heteraxial/Galega

Heteraxial/Hams.gen

Heteraxial/Ophug/personagens.ble

Heteraxial/forlbsmodellen.gel

Heteraxial/iodising.ini

Heteraxial/palolos.txt

udvisende.txt

wisecrack.ini

Sharing

General

Malware Config

Signatures

File Explorer

8101 Fatura 4883- 2026-8.exe

PE Signature issue

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

Heteraxial/Cigarettnders

Heteraxial/Cystaster.ini

Heteraxial/Galega

Heteraxial/Hams.gen

Heteraxial/Ophug/personagens.ble

Heteraxial/forlbsmodellen.gel

Heteraxial/iodising.ini

Heteraxial/palolos.txt

udvisende.txt

wisecrack.ini