TM5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TM5.exe
Size

32KB
MD5

c5cd49bcf5fc17944383d387638c955e
SHA1

13122d07d828637943ca7e8043f77beca4e76928
SHA256

b7ed4b39de012e88ec9ad7f21b0ac68a4e863fe078b5c54857a16d37d480cc21
SHA512

7bc066b43804dad6b346c375efae121c6047ae37cbf1238b1e54ebd045e90daa55cb0f9db239c9d1ac6bf31bb7a48558658ef70fe3c0492cea278de0f5cbbdc5
SSDEEP

768:0abgunPJRyK4QjjuWnXe784mX3XUVPrRG:0GxPJRyKPuWnOwhX3XUpRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TM5.exe

Files

TM5.exe
.exe windows:4 windows x86 arch:x86

40d71453ec4e8149856076260ad67e35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
SetThreadPriority
Sleep
TerminateProcess
TerminateThread
VirtualAlloc
ReadFile
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
QueryPerformanceFrequency
QueryPerformanceCounter
SetFilePointer
MapViewOfFile
LoadLibraryA
HeapFree
HeapAlloc
GlobalMemoryStatusEx
GlobalFree
GlobalAlloc
GetVersion
GetUserDefaultLangID
GetTickCount
GetSystemInfo
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
RtlZeroMemory
MultiByteToWideChar
GetLastError
GetFileSize
GetCurrentThread
GetCurrentProcess
GetCompressedFileSizeA
GetCommandLineA
ExitThread
ExitProcess
CreateThread
CreateProcessA
CreateFileMappingA
CreateFileA
VirtualFree
CloseHandle

user32

wsprintfA
SendMessageA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetForegroundWindow
SetDlgItemTextA
GetWindowPlacement
MessageBoxA
LoadIconA
GetWindowRect
GetWindowLongA
GetSysColor
GetDlgItem
GetDlgCtrlID
DialogBoxParamA

comctl32

InitCommonControls
InitCommonControlsEx

gdi32

SetBkMode
CreateSolidBrush
CreateFontA
SetTextColor

shell32

ShellExecuteA

advapi32

RegOpenKeyExA
LsaOpenPolicy
RegQueryValueExA

winmm

timeGetTime

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ntdll

ZwQuerySystemInformation

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40d71453ec4e8149856076260ad67e35

Headers

File Characteristics

Imports

kernel32

user32

comctl32

gdi32

shell32

advapi32

winmm

comdlg32

ntdll

ole32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 276KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 276KB

.rsrc
Size: 5KB - Virtual size: 4KB