tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

4.2MB
MD5

bf8c6fdc94be13f84c8a83b82f84db59
SHA1

c82090acd404529b53e6f74b8302f41e731bdec0
SHA256

5c22d8989bfdffe32ff795b2a27947b3cdc065c00bb57e2c204ca786d9410511
SHA512

8c89830e9ed169387877fb000b26beaddc5333e77039a7f39701059b3666894a29818cfb69616e4270c74dba2c026b1876f48427922ea855579e95f762340088
SSDEEP

49152:1XhlV6URozj0tHwKA0JXGBDrRT+v57sCvDakzT9DEsBbtQ+oyuQj5Qva:1hloQJXyjGvxtQ+oL25

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

426836a79d7b32094108d6f53da09145

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetCPInfo
RtlUnwind
GetModuleFileNameA
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetStdHandle
GetFileType
WriteConsoleW
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
VirtualAlloc
QueryPerformanceFrequency
SetStdHandle
ExitProcess
GetACP
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetLocalTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetTickCount
ResetEvent
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
GetUserDefaultLCID
GetTempFileNameW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
lstrcmpiW
GetCurrentProcess
GetHandleInformation
SwitchToThread
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
FindResourceExW
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
CreateEventW
WaitForSingleObject
SetEvent
FileTimeToSystemTime
VirtualProtect
GetProfileIntW
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GetSystemDirectoryW
EncodePointer
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
LoadLibraryA
ResumeThread
SetThreadPriority
CopyFileW
FormatMessageW
MulDiv
GlobalSize
WideCharToMultiByte
LocalFree
LocalReAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetAtomNameW
GlobalGetAtomNameW
FindResourceW
SizeofResource
LockResource
LoadResource
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
OutputDebugStringA
MultiByteToWideChar
LCMapStringW
OutputDebugStringW
VirtualQuery
DuplicateHandle
InitializeSListHead
MoveFileExW
GetDriveTypeW
PeekNamedPipe
OpenEventW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
GetLastError
GetCurrentProcessId
Sleep
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
SearchPathW
SetConsoleCtrlHandler

user32

GetIconInfo
MessageBeep
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
CloseClipboard
SetClipboardData
EmptyClipboard
SetCursorPos
CopyIcon
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
GetDoubleClickTime
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
DestroyCursor
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
DrawFrameControl
DrawEdge
IsDialogMessageW
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
NotifyWinEvent
LoadIconW
LoadCursorW
GetWindow
GetTopWindow
TranslateMessage
GetDesktopWindow
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
HideCaret
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LockWindowUpdate
RedrawWindow
TrackMouseEvent
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
KillTimer
SetTimer
SetCapture
GetCapture
GetFocus
GetActiveWindow
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
IsChild
PostThreadMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsMenu
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
MapDialogRect
TabbedTextOutW
IsWindow
PostMessageW
SendMessageW
UnhookWindowsHookEx
PeekMessageW
MapVirtualKeyW
PostQuitMessage
CharUpperW
GetKeyNameTextW
SystemParametersInfoW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
IntersectRect
DestroyMenu
TranslateAcceleratorW
LoadAcceleratorsW
GetAsyncKeyState
InflateRect
SetCursor
ReleaseCapture
GetMessageW
SetRectEmpty
GetSystemMetrics
OffsetRect
SetRect
GetCursorPos
EndDialog
CreateDialogIndirectParamW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetClassNameW
GetClassLongW
PtInRect
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ScrollWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
UnionRect
EndDeferWindowPos
FrameRect
BeginDeferWindowPos
SetWindowPlacement
DrawIconEx
GetWindowPlacement
DestroyWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
IsRectEmpty
GetClipboardFormatNameW
GetClipboardFormatNameA
SendDlgItemMessageA
RealChildWindowFromPoint
ValidateRect
CopyImage
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
DispatchMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
CopyRect
GetSysColor
LoadBitmapW
SetParent
InvertRect
DeferWindowPos

advapi32

OpenServiceW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
MakeSelfRelativeSD
SetSecurityDescriptorDacl
StartServiceW
QueryServiceStatusEx
CloseServiceHandle
OpenSCManagerW
RegCloseKey

ole32

OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleRun
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysFreeString
VarBstrFromDate
VariantCopy
SysAllocString
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo

msimg32

AlphaBlend
TransparentBlt

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindFileNameW
PathIsRelativeA
PathFileExistsW
PathFindExtensionW

uxtheme

GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageHeight
GdipGetImagePalette
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipGetImagePaletteSize
GdipAlloc
GdiplusShutdown
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipGetImagePixelFormat
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageWidth
GdipDeleteGraphics

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

gdi32

CreateHatchBrush
CreateFontIndirectW
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
ExtTextOutW
SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
CreatePalette
CreatePen
LineTo
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
Ellipse
Escape
ExtFloodFill
FillRgn
FrameRgn
GetBkColor
GetBoundsRect
GetNearestPaletteIndex
GetObjectType
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
OffsetRgn
PatBlt
PtInRegion
PtVisible
RectVisible
Rectangle
RealizePalette
RoundRect
SelectObject
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
GetTextMetricsW
GetObjectW
TextOutW
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
GetTextFaceW
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
IntersectClipRect

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

shell32

SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW
DragFinish
DragQueryFileW

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

426836a79d7b32094108d6f53da09145

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

msimg32

shlwapi

uxtheme

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

shell32

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 601KB - Virtual size: 600KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 24KB - Virtual size: 24KB

.reloc Size: 195KB - Virtual size: 195KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 601KB - Virtual size: 600KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 24KB - Virtual size: 24KB

.reloc
Size: 195KB - Virtual size: 195KB