tmp

General

Target
tmp
Size 220KB
Sample240125-vxajsacdfk
SHA256 ee26742f1bab476b9a61e1ace78883e3fd0d0534c35a9839d333b6bc0274f7e0
MD5 ca4524d6dcbf612d26136531cfe42304
SHA1 58869b0cd033706048cc83ca4d22d659fa94f2f6
SHA512 48cb6061b052a988a504f0ad0818bbd5c096b0a5853a2563d8aafd57261829682732ee373504d5956ee81187dc6bad0fe8d1b9f311706e5aa35b78e4a3b0e06c
SSDEEP 3072:isWjEgVMuYCYhDgq0fsE13ZTouFbqSGY/2HKnOC7vIjeBrmf:iljEgVMuNNsK3CuBPjWKnf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

File Explorer

tmp

.exe 220KB

IMPHASH bd51aee81d0101d26d9d59e9d5cef628
SHA256 ee26742f1bab476b9a61e1ace78883e3fd0d0534c35a9839d333b6bc0274f7e0
MD5 ca4524d6dcbf612d26136531cfe42304
SHA1 58869b0cd033706048cc83ca4d22d659fa94f2f6
SHA512 48cb6061b052a988a504f0ad0818bbd5c096b0a5853a2563d8aafd57261829682732ee373504d5956ee81187dc6bad0fe8d1b9f311706e5aa35b78e4a3b0e06c
SSDEEP 3072:isWjEgVMuYCYhDgq0fsE13ZTouFbqSGY/2HKnOC7vIjeBrmf:iljEgVMuNNsK3CuBPjWKnf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5327

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo GetLocaleInfoA FindResourceW SystemTimeToTzSpecificLocalTime EndUpdateResourceW MoveFileExW InterlockedDecrement FreeEnvironmentStringsA GetTickCount EnumCalendarInfoExW GetConsoleAliasesA WriteFile LoadLibraryW LocalShrink HeapCreate GetAtomNameW GetEnvironmentVariableA CompareStringW MultiByteToWideChar ReleaseSemaphore WritePrivateProfileStringW SetCurrentDirectoryA GetLastError GetProcAddress GetLongPathNameA SetComputerNameA LoadLibraryA LocalAlloc GetDiskFreeSpaceA OpenJobObjectW SetConsoleTitleW GetVolumeInformationW IsValidLocale EnumSystemLocalesA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapAlloc GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapFree Sleep FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW RtlUnwind SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW HeapReAlloc IsProcessorFeaturePresent HeapSize CreateFileW CloseHandle FlushFileBuffers GetUserDefaultLCID RaiseException

user32

SetActiveWindow

Sharing