tmp

Sharing

Copy URL Twitter E-mail

General

Target
tmp
Size 192KB
Sample230706-p2asfscc9w
SHA256 fa9e1f5ee3d97f9ca641bfee616450dc924eaebf016c928f905d71897f92dbca
MD5 6e7dc3a0c62291a2c49ceba66cdbd0fe
SHA1 24f186b1ce2f12d6ccdf799eeeea082e8e66cc9d
SHA512 609ee9f7cd73151e2e0affaf2e536178e63beaaf954617577ecb5a2bb6d1a6297d29c82da6bd812b402584a750919778f163e35a4651499fc5697d7cf9905e2f
SSDEEP 3072:+aY0LwJoqkCPyIrxC55WRx1PYhQnepnoXHgfi8qEzzAh0ISgF8Yd9eg+m45uOjN:+7jvxeQioXHT8qCzA5KYdAg+Drx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

File Explorer

tmp

.exe 192KB

IMPHASH a19128c77d60d2b394dfa78b2e70b342
SHA256 fa9e1f5ee3d97f9ca641bfee616450dc924eaebf016c928f905d71897f92dbca
MD5 6e7dc3a0c62291a2c49ceba66cdbd0fe
SHA1 24f186b1ce2f12d6ccdf799eeeea082e8e66cc9d
SHA512 609ee9f7cd73151e2e0affaf2e536178e63beaaf954617577ecb5a2bb6d1a6297d29c82da6bd812b402584a750919778f163e35a4651499fc5697d7cf9905e2f
SSDEEP 3072:+aY0LwJoqkCPyIrxC55WRx1PYhQnepnoXHgfi8qEzzAh0ISgF8Yd9eg+m45uOjN:+7jvxeQioXHT8qCzA5KYdAg+Drx
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15264

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msi

ord217 ord173

credui

CredUIParseUserNameW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

SetStdHandle LoadLibraryA GetLocaleInfoA GetStringTypeW GetStringTypeA WriteConsoleA GetConsoleCP SetFilePointer RtlUnwind InitializeCriticalSection GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleOutputCP GetCommandLineW SetEnvironmentVariableW GetCurrentProcess GetProcAddress Sleep CloseHandle GetLastError CreateProcessW GetShortPathNameW GetModuleFileNameW SearchPathW GetComputerNameW FormatMessageW LoadLibraryW LocalAlloc LocalFree GetModuleHandleW WriteConsoleW HeapSize CreateFileA FlushFileBuffers GetConsoleMode GetModuleFileNameA GetStdHandle WriteFile ExitProcess GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW WideCharToMultiByte LCMapStringA HeapFree HeapAlloc GetCommandLineA GetVersionExA GetProcessHeap GetStartupInfoA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId MultiByteToWideChar

user32

CreateDialogParamW DialogBoxIndirectParamW InflateRect GetSysColorBrush SetCursor DispatchMessageW MessageBoxW EnumWindows SetDlgItemTextW GetMessageW TranslateMessage PostQuitMessage ChildWindowFromPoint IsDialogMessageW GetSysColor RegisterClassExW ShowWindow LoadIconW DefWindowProcW InvalidateRect SetWindowTextW GetWindowThreadProcessId SendMessageW GetDlgItem LoadCursorW EndDialog

gdi32

SelectObject GetStockObject GetObjectW SetTextColor CreateFontIndirectW StartPage GetDeviceCaps EndDoc EndPage StartDocW SetMapMode SetBkMode

comdlg32

PrintDlgW

advapi32

RegSetValueW CreateProcessWithLogonW RegCreateKeyExW RegDeleteKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegCreateKeyW

shell32

ShellExecuteW CommandLineToArgvW SHGetMalloc SHGetDesktopFolder

ole32

CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree