General

  • Target
    tmp5n_pzrgg
  • Size 201KB
  • Sample260518-2c8dmsdv9v
  • SHA256 3a6e86ca55f010a70a477412df2f4d2570f641e5b2b716e617fed4af93230a36
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • tmp5n_pzrgg
    .exe 201KB
  • $PLUGINSDIR/InstallOptions.dll
    .dll 15KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 11KB
  • $PLUGINSDIR/ioSpecial.ini
    211B
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • BT_Product_IND2.png
    .png 3KB
  • QOT8xTzCevTrQ1r.crjOqVOfbN
    116KB
  • Uninstall.exe
    .exe 43KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • api.php
    .xml 608B
  • favicon-96x96.png
    .png 8KB

tmp5n_pzrgg

  • IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
  • SHA256 3a6e86ca55f010a70a477412df2f4d2570f641e5b2b716e617fed4af93230a36
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths