SecuriteInfo[.]com[.]FileRepMalware[.]18917165[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
SecuriteInfo.com.FileRepMalware.18917165.exe

SecuriteInfo.com.FileRepMalware.18917165.exe

IMPHASH 9be4f90f50c714bc00cc8beb2e137299
SHA256 994e246662f064e66552ddc6ef6f3ce88be5e1faf3f3549f87714e67ebf66cff
MD5 d490cb0da1bfe304dd4ccfbd7243da00
SHA1 43751bef800de152334ca2a21ec657346c2428b7
SHA512 7e6ed81c60235c748888981090331cea0733ff8437b83c3641ac9ada7449cb5d320b1f18db5d3b1f2742f720b7f78be10dfe571e7a591033713c60da34d2403e
SSDEEP 12288:J6qUue672UcvUUHPxnYo1kjM0yJ/URV+wJzP:w6aLUUHZYo1kjM0E/KV+SzP
TLSH
T151C40261D3D258E9C4F44A35A8B2DBA1D47B7E610024A20B2F197E7B7C746B08A7B187
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a5:9b:5d:50:1c:6a:37:45:21:aa:f4:73:61:32:6a:23:53:a1:5a:b1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Autorisation,OU=Intuitioner Nybbles menneskekrlige\ ,O=Autorisation,C=FR

Chains

Oct 26, 2026

CN=Autorisation,OU=Intuitioner Nybbles menneskekrlige\ ,O=Autorisation,C=FR

Minor OS version

1

Major OS version

5

Entry point

16973

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyExW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceExW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetUserDefaultUILanguage GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHCLSIDFromString SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetAsyncKeyState GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongPtrW GetWindowRect InvalidateRect IsDlgButtonChecked IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongPtrW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfW wvsprintfW

Name

.text

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ndata

Size

512B

Virtual Size

664KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH 4d584d852b7f891ce3cdd589d9baccfc
SHA256 d976014dab1c1ca93a8f94242a709fb16037f4b047d6ae51d56c9404544e8816
MD5 c9b9b95558d7c44497637a376a3eb9e2
SHA1 d3f988f792f5f80b551f9cef0ff3ad97a4712a30
SHA512 8b615f38e740be03d0d1ed35e5268603efa428d26b56783ec88cf7f36f2f4f1e0f422fa1928abe677c72a78743cf3022040d157f46f7a980e9f330cc895cd0dd
SSDEEP 768:xq2d6pSEIUzBHDG9iAZ/aR2RKKKKKKF91:F0D4S
TLSH
T160C2F8B7F7A2846DC087D278A6C6CBB2B4F1FC645430241E452176313F66AA49FBE2C5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 2a21171b63c0ee0261cd54df366503d2
SHA256 854bdcbe48861b1805047d82044ca7fd656efa2bf16449d41b4cd8bd534db919
MD5 fae5d0298c05898954dae4994a00e4a0
SHA1 60ca4ca37c7922a81da2aac4fde17d35635969dd
SHA512 01e080859c880ae11be6c19beea53f8c4d4b78e366cbf502496ddad588e73d4f0fc44a38fbd04ed45cb0704ec0026d845c969488294a98b94a0e3b72edb743ae
SSDEEP 384:ziWFJNg4ZXTfsqMmBfdletUl9KKKKiTv2z/HpYpxl:zhJNBYq8GKKKKiTOzvi
TLSH
T19E52291B379656A9CC1EE338E4FF4B32A2F3746925207B1E03659A51BDD23A0C939188
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8415

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

363B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Diskforbrug/fotografiapparater

SHA256 f24c2f74fb4e7558d806ead7084c8245a268be67554da1c8435079d61914446b
MD5 6630b13d495a7875eb8eacc796355f03
SHA1 73ab02253eccfd380cbad09dce5b7483cf6c59d0
SHA512 91602a0646479938b4b474890907309561659d0594d700ed06e152ffbe345ddf558c3cfde72b33f0abd79d3b22f2dfacb9074323f14a16bcc43ab732c7b23d59
SSDEEP 768:C/8eGM1pqlS/Xm60bZDa9svyEtiKBGgEDdvggS1goWDlWGtEQD0:mKjbsK62YU
TLSH
T1D9E23A5071CD8EE0F61A5988EA74FF7211733973AFCA2CD22324F5004ABE9553A8D95B
MD5 SHA1 SHA512 SSDEEP TLSH

Diskforbrug/nonconstant.rac

SHA256 72f3a809e30bafe1d3e8eb04c67539d630ba2ce9aae6000598fc659062f24554
MD5 ba7ce0bb8b6c7f504d1db58c81c740c6
SHA1 2a207553dfdef5a9d79c773eaa17f1c46d7568f1
SHA512 2a1896bf86c35255a594c733368f63e6b8315f80bf95f5c1d6588b28094ef1db343c17e0f96dbb619647d7a127675cf6d2a89e0faeb49cf96084e748d41162d9
SSDEEP 768:KmLutkrY2PYN8Mp9v79XhesbkSXRF88TAQ:bc92wyMXHhk98TAQ
TLSH
T175A4D0C951F42D0E65C4E13BBCCC05ED71A728696104B53B6D20AAAB3F897DE2CC5339
MD5 SHA1 SHA512 SSDEEP TLSH

Diskforbrug/sewings.til

SHA256 09419876fe3019c3a9dda3dac8d202797108143e454ce363c374bc196c84c29a
MD5 ff8ca7816f0ee7a8ba389381b77f03fa
SHA1 0dc2c43e93456aacadddd479e5d02a4144aa3064
SHA512 3ba633f1455e44be18c75642d2c355df914f47e6a0d4a9f15f94531f4d96d3827f5a6e2afb8e41236abe117704ce6513b92ac4ec285c60c300215d6da6ab4bd2
SSDEEP 192:Qcvvr+9FgQV+RDiBKZtklduvptE78VfJ0UBtkOS+pUa34NlyC4xmhqB4f1Igbgek:QAYSohliEM0AmOS4RXRc2khS
TLSH
T10C34A0639017A931A7E4DE802789DA7B88492CB039F2297A26D47BF15CB703B7167871
MD5 SHA1 SHA512 SSDEEP TLSH

Diskforbrug/straphang.ail

SHA256 c0412be1bda519a593755ee4d4970f1e3d0685d4759853ff4366107879d2a8ac
MD5 ecb57429540a340622e89351b24f3993
SHA1 677a1cdb69f08eb2f546bb8263ccd2effec75b89
SHA512 89ed7eccc92808b7d0e1a11179c806d8bb0082166c88fccbff9b39de6c1539fbdb4f671f6b42e6f7ba2f84e648924cef9b6c98036f2100a07f2b3358cdfa436f
SSDEEP 768:F1ys+SFl5hHvBOb3Uic8zACD5kIRE+FNV/rsMwMH:Fw2l5hYUiR15fE+ljsNm
TLSH
T1F884B02269A7EC31173A6579B6224F7EDE07AA3C4774B53C064FC31FE9584CC961550C
MD5 SHA1 SHA512 SSDEEP TLSH

Fascistoides

SHA256 c5932e9954bd14562605f2d4d80ce402e703c84b73d3d9e4297fa0d60be8f8e7
MD5 77a6db59eb96aa92e052500beb988a80
SHA1 f6cbbc32f292c161213b44965cbe181b1900d083
SHA512 58e1c2f5cd95728c7ff1c5849dfd2591f8c8f0ca09923e89ab4de3e5a1f6cee1de61aa9f3eca147e042cf380fedaa9b982245fade8ec14520010411275cddb14
SSDEEP 6144:CaEEhr1wOUiiyOIgXRua5XEwed00/5/exzt/qg3IPezOjfILYr5M8wYj00ttVKwN:5EywXiHgXcahpeemO5/LIGz9LYVi0P
TLSH
T1ABA4BEF5AF7DD848C03671A60392BEA0D780D986E8561B3B61B8E3756B4CC40D4D3E6B
MD5 SHA1 SHA512 SSDEEP TLSH

flintwood.bar

SHA256 7e2bd315ba4f4653fc313b90113ade987f85b52d8db95c3da5f31b10df11e98b
MD5 74f4aec7aa0de3654914c149a6849bf2
SHA1 f7c6d6ed4923673d7953df406ca87210c98517df
SHA512 269d7b7786d635d60486ff832fe44db1b7d628ace7f1ea6ce78c82cd567c3abbb59e3d54928867dfc8315cc00d754c6e3d96afb407a3dbfa99c6a376478fd3e3
SSDEEP 1536:zsgSdE19EL1za/Q0Wh6efFmZfsYAQHzy0xXkCi9akyHfhTSLbZqRZYQuvJ4RJFx6:zlSd1hz6WIfLy85Vky/5yQu6T7EQ0DSc
TLSH
T17415E1041837D1D6C087A43DE607DF4BF1627932C61EB2FA9234D74A529ED9DA3E54C4
MD5 SHA1 SHA512 SSDEEP TLSH

SecuriteInfo.com.FileRepMalware.18917165.exe

PE Signature issue

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

comdlg32

gdi32

kernel32

ole32

shell32

user32

generic

Diskforbrug/fotografiapparater

Diskforbrug/nonconstant.rac

Diskforbrug/sewings.til

Diskforbrug/straphang.ail

Fascistoides

flintwood.bar

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.FileRepMalware.18917165.exe

PE Signature issue

advapi32

comctl32

gdi32

kernel32

ole32

shell32

user32

generic

$PLUGINSDIR/System.dll

kernel32

msvcrt

ole32

user32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

comdlg32

gdi32

kernel32

ole32

shell32

user32

generic

Diskforbrug/fotografiapparater

Diskforbrug/nonconstant.rac

Diskforbrug/sewings.til

Diskforbrug/straphang.ail

Fascistoides

flintwood.bar