tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

379KB
MD5

00501883bc325205df90e72263743361
SHA1

676ff0f6b79cc4fe0747638a25d3e70585dced8b
SHA256

2d1f382c705e3d411f54f045afe4c9703b2103235f67b4de261569842c4be80d
SHA512

8c2e7e61943b795a9d562a27837f03e107b9fe9227f366a2a9bf7fea554d06c4dc607458d0491092f20b4f2906efab015d9366a213de1cf80aa165eef405da61
SSDEEP

6144:4+ypfcZxVanYLd0VvenBzQmKdztKRE5HsUpApvmIPb/h2mw:NypfcZxsnYLd7QNvxvIPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
GetWindowRect
EnableWindow
EndDialog
PostMessageA
PostQuitMessage
ShowWindow
SetWindowPlacement
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
InsertMenuItemA
GetClassInfoW
GetClassInfoA
DialogBoxParamW
DialogBoxParamA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
SendMessageA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
CheckDlgButton
KillTimer
wsprintfA
SetDlgItemTextA
IsDlgButtonChecked
ClientToScreen
GetCursorPos
AppendMenuA
TrackPopupMenuEx
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetParent
GetKeyState
GetSubMenu
CreatePopupMenu
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenuItemCount
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
DestroyMenu
GetDlgItem
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement

oleaut32

SysStringByteLen
VariantCopy
VariantClear
SysFreeString
SysAllocString

advapi32

GetUserNameW
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW

shell32

SHChangeNotify
ShellExecuteExA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
SHGetMalloc
SHGetFileInfoA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoUninitialize
CoInitialize
CoCreateInstance

comctl32

CreateStatusWindowW
ord17
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
PropertySheetA
CreateToolbarEx

mpr

WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
WNetAddConnection2W
WNetOpenEnumW

gdi32

DeleteObject

comdlg32

GetOpenFileNameA
GetOpenFileNameW

msvcrt

wcscpy
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
__CxxFrameHandler
_CxxThrowException
memcmp
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
malloc
free
srand
_onexit

kernel32

SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
ReadFile
GetDiskFreeSpaceA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
GetVolumeInformationA
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CreateProcessA
CreateProcessW
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
GetDriveTypeA
GetCommandLineW
GetVersionExA
LoadLibraryA
FileTimeToSystemTime
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
GetStdHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetVolumeInformationW
CreateEventA
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
GetStartupInfoA
DeviceIoControl

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f67d1f0614eb91002e102431d1481d99

Headers

File Characteristics

Imports

user32

oleaut32

advapi32

shell32

ole32

comctl32

mpr

gdi32

comdlg32

msvcrt

kernel32

Sections

.text Size: 266KB - Virtual size: 266KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 43KB - Virtual size: 42KB

.text
Size: 266KB - Virtual size: 266KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 43KB - Virtual size: 42KB