tmpxafjgyn_

Sharing

Copy URL Twitter E-mail

General

Target
tmpxafjgyn_
Size 590KB
Sample260511-2ys6vae15n
SHA256 43c5f2e7aacbc9a3439a810e3768087b7c8bea191ef84d71b2aa8686befed073
MD5 eb5eb336636e3f6cacf6c8db6bf4ea00
SHA1 e09eea305aa0f2897b3d7dac55c2ef2857bdfa5b
SHA512 4f728b1ae4b5328feb491e163950c78e888270fd4cd0a19396ff770e5ec2bd38815ce2fa6539bda69e4601150e6c9807708255e8219ded2a18420d8340bbffd5
SSDEEP 12288:LP9UI7pPBvO1cBLHTO1HMqkZh8LcwzMDHTswo/7Dq84DRDk:LPBvKcxO1MqLcCMDIwo/nkk
TLSH
T132D4336E283ABE91DAB500F1934473464CE1131EDD2AFD97B5F4F79B6CB0A4A01A701A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Vcffipzmnipbxzdl.exe

File Explorer

tmpxafjgyn_

.zip 590KB
Vcffipzmnipbxzdl.exe

.exe 827KB

SHA256 43c5f2e7aacbc9a3439a810e3768087b7c8bea191ef84d71b2aa8686befed073
MD5 eb5eb336636e3f6cacf6c8db6bf4ea00
SHA1 e09eea305aa0f2897b3d7dac55c2ef2857bdfa5b
SHA512 4f728b1ae4b5328feb491e163950c78e888270fd4cd0a19396ff770e5ec2bd38815ce2fa6539bda69e4601150e6c9807708255e8219ded2a18420d8340bbffd5
SSDEEP 12288:LP9UI7pPBvO1cBLHTO1HMqkZh8LcwzMDHTswo/7Dq84DRDk:LPBvKcxO1MqLcCMDIwo/nkk
TLSH
T132D4336E283ABE91DAB500F1934473464CE1131EDD2AFD97B5F4F79B6CB0A4A01A701A
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Vcffipzmnipbxzdl.exe

IMPHASH f4228cb049acde33150c5fe763f4201f
SHA256 c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378
MD5 7f9c454a2e016e533e181d53eba113bc
SHA1 694dc7713537a7237030f7623881423fcb8d8c5c
SHA512 6869cf5a7c3526acf402b1ef09a9477dedf6cf534ff728e0823b9413ba41e888bd5b61cc20421d4a799df493126598a4a906ac2ab46147d9e4bcfa5d3600a110
SSDEEP 12288:06NINoPgXqvRyq5E3R18y0kQzX3EL1TdB0JUsoSfsJuRqQy5d5t:06iWP9JAR18ycD3ErB2rs8MQy5
TLSH
T1AB059C257995C43EC6690931EC0DEAFCC8663C48DF6983A732CBBF9E37313516628295
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

251782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA HeapAlloc HeapReAlloc HeapFree VirtualAlloc GetCommandLineA GetProcessHeap RaiseException RtlUnwind HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter SetFilePointer VirtualFree HeapDestroy HeapCreate GetStdHandle GetACP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW WriteFile GetOEMCP GetCPInfo GetLocaleInfoA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom lstrcmpW GetVersionExA GetThreadLocale GlobalGetAtomNameA GlobalFlags lstrcmpA GetCurrentThreadId InterlockedIncrement InterlockedDecrement GetModuleHandleA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection GetCurrentProcessId GetModuleFileNameA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA SetLastError InterlockedExchange LoadLibraryA SizeofResource FreeLibrary FlushFileBuffers PrepareTape Sleep GetCurrentProcess GetVersion CompareStringA LockResource SetEvent GetProcAddress CloseHandle VirtualProtect lstrlenA DeleteFileA WideCharToMultiByte MultiByteToWideChar GetLastError FindResourceA LocalFree LocalAlloc CreateProcessA FindResourceExA GetStartupInfoA LoadResource IsDebuggerPresent GetTickCount

user32

SetForegroundWindow GetMenu PostMessageA CreateWindowExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem GetFocus ClientToScreen GetWindow GetDlgCtrlID GetClassNameA PtInRect GetWindowTextA SetWindowTextA UnregisterClassA SetWindowsHookExA GetKeyState LoadCursorA GetSystemMetrics GetDC GetSysColor UnhookWindowsHookEx GetWindowThreadProcessId SendMessageA GetParent GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxA GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu DrawTextA InflateRect GetWindowRect CreatePopupMenu GetForegroundWindow CallNextHookEx DispatchMessageA EnumWindows CreateDialogIndirectParamA SetParent GetSysColorBrush GetClientRect IntersectRect DefWindowProcA GetWindowLongA ExitWindowsEx DialogBoxIndirectParamA EndDeferWindowPos GetClassInfoExA ReleaseDC MapWindowPoints ValidateRect PostQuitMessage GrayStringA DrawTextExA TabbedTextOutA DestroyMenu RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime PeekMessageA GetMessagePos

gdi32

ExtTextOutA SaveDC RestoreDC SetMapMode ScaleViewportExtEx PtVisible SelectObject SetViewportOrgEx SetWindowExtEx DeleteDC GetStockObject SetBkColor SetTextColor GetClipBox CreateBitmap DeleteObject GetDeviceCaps SetViewportExtEx ScaleWindowExtEx OffsetViewportOrgEx Escape TextOutA RectVisible

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

ole32

CoInitialize CoRevokeClassObject CoTaskMemAlloc CoUninitialize CoTaskMemFree

oleaut32

VariantClear OleLoadPicture OleCreatePictureIndirect OleCreateFontIndirect SysReAllocStringLen SysFreeString SysStringLen OleCreatePropertyFrame OleTranslateColor SysAllocStringLen SysReAllocString OleIconToCursor OleCreatePropertyFrameIndirect SysAllocString VariantChangeType VariantInit

oleacc

LresultFromObject CreateStdAccessibleObject