tmpe93aiivw[.]exe | Triage™

General

Target
tmpe93aiivw.exe
Size 4.1MB
Sample260522-24v8dsfz3l
SHA256 7e6b5771c463d761b031935e575bab8635692d84cc54aed9b30c0c943e351816
MD5 7345e800d1794756878b92be4b7bdb9e
SHA1 eac9b8c3aa0f1dcd5c359d739b1378d31a169833
SHA512 a896975134ba8407eba477263afb1b723c65f5c4fab5d1cc1fdcc229be8dbd41d305a9f64d650e81d084ae7505b24e2d78760b7514f05b71cec62287614c696d
SSDEEP 98304:zLj+ZFEMZ1WdAvUc3yJpeRVFVhl3S6EhpOdotJVsEPw:HjiFbTuA8c3kmvOCdiJVjI
TLSH
T159163333BD12D036C17315786661C1F42EBEA0B842379D477AFC06756E322E5EA3929B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpe93aiivw.exe

File Explorer

tmpe93aiivw.exe

.exe 4.1MB

tmpe93aiivw.exe

IMPHASH 8c868173f9537def4785230306f9670b
SHA256 7e6b5771c463d761b031935e575bab8635692d84cc54aed9b30c0c943e351816
MD5 7345e800d1794756878b92be4b7bdb9e
SHA1 eac9b8c3aa0f1dcd5c359d739b1378d31a169833
SHA512 a896975134ba8407eba477263afb1b723c65f5c4fab5d1cc1fdcc229be8dbd41d305a9f64d650e81d084ae7505b24e2d78760b7514f05b71cec62287614c696d
SSDEEP 98304:zLj+ZFEMZ1WdAvUc3yJpeRVFVhl3S6EhpOdotJVsEPw:HjiFbTuA8c3kmvOCdiJVjI
TLSH
T159163333BD12D036C17315786661C1F42EBEA0B842379D477AFC06756E322E5EA3929B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

27:6d:03:4d:55:25:28:2d:b1:ea:79:06:39:6f:79:5e:d4:ed:fd:96:53:34:30:05:6c:fc:fd:15:91:7f:6c:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 20, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

37558

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wuro\legiyecohi-bosatirozobek wasiz\nuy\daruxiziw\guboz51_getu.pdb

kernel32

GetVolumeInformationA GetComputerNameA LocalSize InterlockedExchange GetSystemTimeAdjustment FindNextVolumeA GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressW VerifyVersionInfoW LocalLock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryW GetModuleHandleA lstrlenW FindResourceW GetComputerNameExW GetProcAddress GlobalAlloc WriteConsoleW GetFileTime GetConsoleAliasesLengthA GetOEMCP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxA GetModuleHandleW FindNextVolumeW CancelDeviceWakeupRequest LocalUnlock GetConsoleFontSize GetPrivateProfileStructW InterlockedCompareExchange EnumCalendarInfoA EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI LoadLibraryW GetTickCount SetLastError FoldStringW LoadLibraryA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapAlloc TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc SetFilePointer HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleA GetConsoleOutputCP ReadFile CreateFileA CloseHandle DeleteFileA

gdi32

GetCharWidthA

Sharing