tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

1.0MB
MD5

217dc98e219a340cb09915244c992a52
SHA1

a04f101ca7180955d62e4a1aaeccdcca489209da
SHA256

27c8bd76150ddda5b09d6db11f67269cee2eecac345df67f93aab3e3aaabde7c
SHA512

dddc15992533c8c13000163c7dd59b20e2fbdedbf611338c04f6f9209ec1a95d1f93aaeeae2778890214d333320978f5d2554348722ea6c8489320f0ef1c4c85
SSDEEP

24576:bIyF/qfrA6aT976FsnYp91GNaAX4Ab6AlewmQ6BZNeZ:zF/4rq6FsnYpmNaAX4AlewmbNeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

7cfb581dbc97698291471962103b52dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

VirtualQuery
GetSystemInfo
VirtualProtect
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetThreadLocale
GetACP
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetCommandLineA
GetStartupInfoA
GetCPInfo
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThread
GetStringTypeA
GetStringTypeW
FatalAppExitA
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
LCMapStringA
LCMapStringW
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetTimeFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
GetConsoleCP
GetEnvironmentStrings
GetFileSize
FormatMessageA
GetComputerNameA
GetLocaleInfoA
GetSystemDefaultLangID
GetCurrentProcessId
GetModuleFileNameA
LoadLibraryExA
SizeofResource
lstrlenW
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
LocalAlloc
LocalFree
LoadLibraryA
FreeLibrary
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
lstrcpynW
WritePrivateProfileSectionA
Sleep
FindResourceA
LoadResource
LockResource
WinExec
GetProcessHeap
HeapAlloc
HeapFree
VerLanguageNameA
lstrcmpA
IsDBCSLeadByte
MultiByteToWideChar
GetSystemDirectoryA
GetWindowsDirectoryA
CreateEventA
ResetEvent
CreateThread
OpenEventA
SetEvent
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetPrivateProfileStringA
GlobalSize
SetFilePointer
ReadFile
MoveFileA
ExpandEnvironmentStringsA
lstrcpynA
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
MulDiv
FreeEnvironmentStringsW
GetVersionExA
CreateFileA
WriteFile
CloseHandle
FindFirstFileA
GetDateFormatA
FindNextFileA
FindClose
WritePrivateProfileStringA
GetPrivateProfileIntA
RemoveDirectoryA
CreateDirectoryA
DeleteFileA
GetFileAttributesA
CopyFileA
GetLastError
SetLastError
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrcmpiA
CompareStringA
OutputDebugStringA
DebugBreak
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
lstrlenA
lstrcpyA
WriteConsoleW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA

user32

GetDoubleClickTime
GetMessagePos
wsprintfA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsMenu
TranslateMDISysAccel
ModifyMenuA
TrackPopupMenuEx
SetMenuItemInfoA
GetMenuItemInfoA
LoadBitmapA
EqualRect
InsertMenuA
GetMenuItemID
SetParent
LockWindowUpdate
SetWindowPlacement
GetWindowPlacement
SetMenu
GetMenu
SetRectEmpty
GetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
MessageBeep
GetDesktopWindow
LoadImageA
DrawIconEx
IsWindowEnabled
RedrawWindow
GetMessageA
PostQuitMessage
UnregisterClassA
RegisterWindowMessageA
DrawFrameControl
InflateRect
CopyRect
GetDlgCtrlID
MoveWindow
DefMDIChildProcA
DrawFocusRect
FrameRect
GetClipboardData
DispatchMessageA
PeekMessageA
GetSysColor
GetKeyState
CharLowerA
GetSystemMetrics
GetCursorPos
PtInRect
EndPaint
BeginPaint
GetSubMenu
SetCaretPos
GetCapture
TrackPopupMenu
FillRect
CallWindowProcA
DestroyMenu
LoadMenuA
EnableMenuItem
DestroyCaret
ReleaseCapture
SetScrollInfo
GetScrollInfo
ShowCaret
CreateCaret
DragDetect
GetClassLongA
CallNextHookEx
LoadAcceleratorsA
UnhookWindowsHookEx
SetWindowsHookExA
GetSystemMenu
GetMenuStringA
LoadStringW
ShowScrollBar
SetScrollPos
ScrollWindowEx
SetCapture
KillTimer
SetTimer
UpdateWindow
RegisterClassExA
EmptyClipboard
CloseClipboard
SetClipboardData
GetWindowDC
DrawMenuBar
AdjustWindowRectEx
BringWindowToTop
TranslateMessage
GetSysColorBrush
DrawStateA
DestroyIcon
GetWindowThreadProcessId
GetMenuDefaultItem
WindowFromPoint
SetMenuDefaultItem
DefFrameProcA
SetForegroundWindow
FindWindowA
DrawEdge
IsWindowVisible
SetRect
RegisterClipboardFormatA
IsClipboardFormatAvailable
GetFocus
GetClassInfoA
DefWindowProcA
RegisterClassA
GetMenuItemCount
GetClassInfoExA
OpenClipboard
IsChild
SetFocus
TranslateAcceleratorA
InvalidateRect
ScreenToClient
ClientToScreen
PostMessageA
RemoveMenu
AppendMenuA
CreatePopupMenu
LoadIconA
DestroyWindow
GetActiveWindow
ExitWindowsEx
DialogBoxParamA
SetCursor
MessageBoxA
EnableWindow
ShowWindow
GetClassNameA
LoadCursorA
OffsetRect
ReleaseDC
GetDC
DrawTextA
CharNextA
wvsprintfA
LoadStringA
GetWindow
GetWindowRect
SystemParametersInfoA
MapWindowPoints
SetWindowPos
IsWindow
GetDlgItem
GetParent
SetDlgItemTextA
GetClientRect
SendMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindowLongA
CreateWindowExA
SetWindowLongA
EndDialog
IntersectRect

gdi32

GetViewportOrgEx
GetDIBits
CreateRectRgn
GetClipRgn
Polyline
SelectClipRgn
IntersectClipRect
CreateBitmap
CreatePatternBrush
PatBlt
SetStretchBltMode
SetDIBitsToDevice
GetTextMetricsA
LineTo
MoveToEx
GetTextExtentPointA
CreatePen
Rectangle
CreatePalette
ExtTextOutA
Polygon
SetPolyFillMode
SetBkMode
RealizePalette
SelectPalette
LPtoDP
DPtoLP
SetBkColor
SetTextColor
CreateSolidBrush
BitBlt
GetClipBox
CreateCompatibleBitmap
SetWindowOrgEx
CreateCompatibleDC
TextOutA
RestoreDC
SaveDC
SetViewportOrgEx
GetDeviceCaps
CreateFontA
GetTextExtentPoint32A
GetStockObject
CreateFontIndirectA
DeleteDC
DeleteObject
GetObjectA
SelectObject

comdlg32

GetOpenFileNameA
ChooseColorA
ChooseFontA
GetSaveFileNameA

advapi32

GetTokenInformation
RegDeleteKeyA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetLengthSid
CopySid
RegEnumValueA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetKeySecurity
RegGetKeySecurity
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExW
RegDeleteValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
InitializeAcl
SetNamedSecurityInfoA
GetNamedSecurityInfoA
MapGenericMask
RegEnumValueW
RegSetValueExW
RegSetValueExA
RegCreateKeyExA
RegUnLoadKeyA
RegLoadKeyA
RegReplaceKeyA
RegRestoreKeyA
RegSaveKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueW
RegConnectRegistryA

shell32

DragQueryFileA
DragFinish
DragAcceptFiles
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHGetSpecialFolderLocation
FindExecutableA
SHBrowseForFolderA

ole32

CoCreateInstance
DoDragDrop
CoTaskMemRealloc
RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CoUninitialize
OleInitialize
OleDuplicateData

oleaut32

VarUI4FromStr
VarR8FromStr
SystemTimeToVariantTime
SysFreeString
VarI4FromStr

shlwapi

SHSetValueA
PathFileExistsA
PathStripPathA
PathAddExtensionA
PathFindExtensionA
SHDeleteKeyA
PathRemoveFileSpecA
SHGetValueA

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Remove
ImageList_GetIcon
ord6
ord8
ImageList_Destroy
DestroyPropertySheetPage
ImageList_LoadImageA
PropertySheetA
CreatePropertySheetPageA
ImageList_AddMasked
ImageList_Draw
InitCommonControlsEx
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Create

Sections

.text
Size: 864KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cfb581dbc97698291471962103b52dd

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 864KB - Virtual size: 863KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 16KB - Virtual size: 92KB

.rsrc Size: 74KB - Virtual size: 73KB

.text
Size: 864KB - Virtual size: 863KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 16KB - Virtual size: 92KB

.rsrc
Size: 74KB - Virtual size: 73KB