tmp

Sharing

Copy URL Twitter E-mail

General

Target
tmp
Size 8.3MB
Sample240109-19k4yaabaq
SHA256 10165e27e0db0a6708f346ddea657ab0409499f93eb8426a80864a966f0f401e
MD5 cb2ffac2a251378cda3f91cd613f453d
SHA1 3a028761638f5aa93b0719c5650c83a138e8abc9
SHA512 1d203540fde5074f0d57e1ecbd9af2ee862b940f8fb58c3e55ad9db5ba029aff82a4468eee24c760b5e55cc96e61244af0fd6f3c46db857824e13e45ec1e802f
SSDEEP 196608:P4Z1cDw8TWMpWRGAk7R85du3dWbpkPbVAp2FG0c+imht+:PE1CE3k7R5NWqu0cU+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

File Explorer

tmp

.exe 8.3MB

IMPHASH c769210c368165fcb9c03d3f832f55eb
SHA256 10165e27e0db0a6708f346ddea657ab0409499f93eb8426a80864a966f0f401e
MD5 cb2ffac2a251378cda3f91cd613f453d
SHA1 3a028761638f5aa93b0719c5650c83a138e8abc9
SHA512 1d203540fde5074f0d57e1ecbd9af2ee862b940f8fb58c3e55ad9db5ba029aff82a4468eee24c760b5e55cc96e61244af0fd6f3c46db857824e13e45ec1e802f
SSDEEP 196608:P4Z1cDw8TWMpWRGAk7R85du3dWbpkPbVAp2FG0c+imht+:PE1CE3k7R5NWqu0cU+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74191

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

shell32

SHGetSpecialFolderPathW ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW

gdi32

CreateFontIndirectW DeleteObject GetDeviceCaps GetObjectW CreateCompatibleDC SelectObject CreateCompatibleBitmap SetStretchBltMode DeleteDC GetCurrentObject StretchBlt

user32

GetWindowRect ScreenToClient CreateWindowExW GetWindowTextW GetMessageW GetParent KillTimer DestroyWindow CharUpperW EndDialog SendMessageW wsprintfW CopyImage ReleaseDC GetWindowDC SetWindowPos GetMenu GetWindowLongW DispatchMessageW GetWindowTextLengthW GetSysColor SetWindowTextW MessageBoxA wsprintfA GetKeyState GetDlgItem GetClientRect GetSystemMetrics SetWindowLongW SetFocus SystemParametersInfoW ShowWindow DrawTextW GetDC ClientToScreen GetWindow DialogBoxIndirectParamW DrawIconEx CallWindowProcW DefWindowProcW IsWindow wvsprintfW LoadImageW LoadIconW MessageBeep EnableWindow EnableMenuItem GetSystemMenu GetClassNameA SetTimer

ole32

CreateStreamOnHGlobal CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantClear OleLoadPicture

kernel32

SetEndOfFile EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects DeleteCriticalSection GetModuleHandleA SetFileTime ReadFile SetFilePointer GetFileSize GetSystemDirectoryW FormatMessageW lstrcpyW LocalFree IsBadReadPtr SuspendThread ResumeThread TerminateThread InitializeCriticalSection ResetEvent SetEvent CreateEventW GetVersionExW GetCommandLineW GetModuleFileNameW SetCurrentDirectoryW GetDriveTypeW CreateFileW CloseHandle SetEnvironmentVariableW GetTempPathW lstrlenW GetSystemTimeAsFileTime CompareFileTime SetThreadLocale FindFirstFileW DeleteFileW FindNextFileW FindClose RemoveDirectoryW ExpandEnvironmentStringsW WideCharToMultiByte VirtualAlloc GlobalMemoryStatusEx lstrcmpW GetEnvironmentVariableW lstrcmpiW lstrlenA GetLocaleInfoW MultiByteToWideChar GetUserDefaultUILanguage GetSystemDefaultUILanguage GetSystemDefaultLCID lstrcmpiA GlobalAlloc GlobalFree MulDiv FindResourceExA SizeofResource LoadResource LockResource LoadLibraryA GetProcAddress GetModuleHandleW VirtualFree GetStdHandle ExitProcess lstrcatW GetDiskFreeSpaceExW SetFileAttributesW SetLastError Sleep GetExitCodeThread WaitForSingleObject CreateThread GetLastError SystemTimeToFileTime GetLocalTime GetFileAttributesW CreateDirectoryW WriteFile GetStartupInfoA

msvcrt

??2@YAPAXI@Z _purecall memcmp free memcpy _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit ??1type_info@@UAE@XZ _onexit __dllonexit _CxxThrowException _beginthreadex _EH_prolog ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z memset _wcsnicmp strncmp malloc memmove _wtol ??3@YAXPAX@Z