tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

1.9MB
MD5

7fda9736180c8faa4bc5732c2fec31c8
SHA1

7cbd15f0cf6f650565b9034da30051816d1a8d0e
SHA256

6f54bdf7129fdd028af6960320fc3acb9095baed1c00acfb79466fe83714051c
SHA512

43dafb1ab9f36f925feadecceda734db5e4bf0760ec51b791f43759a2fdde41494abb7d3067bdcfa1f2ebb53433b337c0e0ec778be4b4d8c625e1174a92bbe21
SSDEEP

49152:VUwzIfc5SbXu2DUAeZfNKC/8aLNeuoEMeXiU7gEyAvkWt:Vjzp5SDbDUAedN5/b5euoEMeXiU7gEbv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

fd4b3a1addc76c07f49b9d407573b8d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
OutputDebugStringW
LCMapStringW
ReadConsoleW
GetDriveTypeW
WriteConsoleW
SetEnvironmentVariableA
GetConsoleMode
GetTimeZoneInformation
GetConsoleCP
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
HeapQueryInformation
GetModuleHandleExW
ExitProcess
GetFileType
SetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
ExitThread
CreateThread
GetCommandLineW
FindResourceExW
VirtualProtect
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
InitializeCriticalSection
GlobalFlags
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SuspendThread
SetThreadPriority
lstrcpyW
GetTickCount
CompareStringA
GetVersionExW
GetCurrentThread
FindNextFileW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
GetModuleHandleW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FileTimeToSystemTime
LoadLibraryExW
FreeLibrary
FileTimeToLocalFileTime
WideCharToMultiByte
SetLastError
CopyFileW
GlobalSize
GetModuleFileNameW
Sleep
CreateMutexW
DecodePointer
HeapSize
RaiseException
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
InterlockedExchange
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
SetEvent
FreeResource
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CreateEventW
TerminateProcess
OpenProcess
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetCurrentDirectoryA
lstrlenA
lstrcmpA
LocalAlloc
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentProcess
FormatMessageW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessW
GetLastError
LocalFree

user32

SetCapture
GetAsyncKeyState
IsZoomed
TrackMouseEvent
EnumDisplayMonitors
SetRectEmpty
SetLayeredWindowAttributes
IntersectRect
CopyImage
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
DestroyMenu
DestroyIcon
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
RegisterClipboardFormatW
KillTimer
SetTimer
WaitMessage
PostQuitMessage
SendDlgItemMessageA
GetCursorPos
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DrawStateW
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
CharUpperW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadMenuW
GetDesktopWindow
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
ReleaseCapture
GetSystemMenu
DeleteMenu
IsMenu
UpdateLayeredWindow
MessageBoxW
EnableWindow
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
UnhookWindowsHookEx
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendMessageA
DrawIcon
MessageBoxA
LoadIconW
UnregisterClassW
GetParent
GetWindowRect
GetClientRect
SetWindowRgn
MessageBeep
WindowFromPoint
OffsetRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
GetWindowRgn
GetSystemMetrics
SendMessageW
GetComboBoxInfo
MapDialogRect
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
SetRect
GetDC
EnableScrollBar
UnionRect
MonitorFromPoint
PostThreadMessageW
ReleaseDC
InvalidateRect
FillRect
GetSysColor
CopyRect
IsIconic
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetParent
BringWindowToTop
LockWindowUpdate
SetClassLongW
OpenClipboard
CloseClipboard
IsRectEmpty
SetClipboardData
EmptyClipboard
LoadImageW
CharUpperBuffW
ModifyMenuW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
CopyIcon
FrameRect
GetNextDlgGroupItem
GetIconInfo
HideCaret
InvertRect
GetDoubleClickTime
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel

gdi32

GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
SetRectRgn
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CreateRoundRectRgn
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
GetRgnBox
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
CreateDCW
CopyMetaFileW
CreateBitmap
GetStockObject
GetDIBColorTable
StretchBlt
CreateDIBSection
GetObjectW
SetDIBColorTable
CreateCompatibleDC
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC
SelectObject
PatBlt
CreateCompatibleBitmap
GetDeviceCaps

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueW

shell32

ShellExecuteExW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
ShellExecuteW
ExtractIconW
SHGetDesktopFolder

comctl32

InitCommonControlsEx

shlwapi

UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetCurrentThemeName
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor

ole32

CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateGuid
OleInitialize
OleUninitialize
StringFromGUID2
CoCreateInstance
CoInitialize
CoDisconnectObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
CoInitializeEx
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoFreeUnusedLibraries

oleaut32

VarBstrFromDate
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantInit
SysStringByteLen
VariantChangeType
VariantCopy
VariantClear
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleLoadPicture

oledlg

OleUIBusyW

gdiplus

GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdipFree
GdipGetImagePixelFormat

ws2_32

WSASetLastError
WSACleanup
WSAStartup

crypt32

CertCloseStore
CertOpenSystemStoreW
CertFreeCertificateContext

cryptui

CryptUIDlgSelectCertificateFromStore

wininet

HttpQueryInfoW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionExW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetReadFile
InternetCloseHandle
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd4b3a1addc76c07f49b9d407573b8d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

crypt32

cryptui

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 333KB - Virtual size: 332KB

.data Size: 25KB - Virtual size: 54KB

.rsrc Size: 45KB - Virtual size: 45KB

.reloc Size: 120KB - Virtual size: 120KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 333KB - Virtual size: 332KB

.data
Size: 25KB - Virtual size: 54KB

.rsrc
Size: 45KB - Virtual size: 45KB

.reloc
Size: 120KB - Virtual size: 120KB