tmpj248t_tu

Sharing

Copy URL Twitter E-mail

General

Target
tmpj248t_tu
Size 238KB
Sample260522-ppln7aa17j
SHA256 e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318
MD5 69db297fe4073f0412a5dedb81272550
SHA1 ccff27fec138a81da4c0374411af1c8b66e80928
SHA512 5dff4537a55ba95c30ffa85f1b9e7153fe74659a7333f4d3d3939fd0d6455b4383de1f84f0e32f1007fb477bbd0bacaf2106147e18628da0ed4a1d7375133833
SSDEEP 6144:6mkLu0Aq9r8q7XMaC4+yPY7HLgZl3MovMfCp5CR:jkLsq9r8q7Xp27rk3Moa
TLSH
T181345B3067E0C035F9BB57B489BA82B8AA393DA16B3490CF52E035ED5674AE4DC31357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpj248t_tu

File Explorer

tmpj248t_tu

.exe 238KB

IMPHASH 8d379991d6270032480b18bc9d790531
SHA256 e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318
MD5 69db297fe4073f0412a5dedb81272550
SHA1 ccff27fec138a81da4c0374411af1c8b66e80928
SHA512 5dff4537a55ba95c30ffa85f1b9e7153fe74659a7333f4d3d3939fd0d6455b4383de1f84f0e32f1007fb477bbd0bacaf2106147e18628da0ed4a1d7375133833
SSDEEP 6144:6mkLu0Aq9r8q7XMaC4+yPY7HLgZl3MovMfCp5CR:jkLsq9r8q7Xp27rk3Moa
TLSH
T181345B3067E0C035F9BB57B489BA82B8AA393DA16B3490CF52E035ED5674AE4DC31357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

CreateFileW SetEndOfFile FlushFileBuffers GetStringTypeW SetStdHandle MultiByteToWideChar LCMapStringW GetProcAddress HeapSize HeapReAlloc LoadLibraryW CreateFileA GetFileSize GetProcessHeap HeapAlloc ReadFile CloseHandle HeapFree GetLastError FindFirstFileA FindClose GetLogicalDrives HeapCreate GetSystemTime OutputDebugStringW WriteConsoleW OutputDebugStringA IsValidCodePage GetCPInfo GetOEMCP GetACP GetConsoleMode GetConsoleCP GetModuleHandleA HeapQueryInformation LoadLibraryA SetFilePointer WriteFile SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection GetFileType SetEnvironmentVariableA GetCurrentDirectoryA SetCurrentDirectoryA GetCommandLineA HeapSetInformation GetStartupInfoW DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind IsProcessorFeaturePresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement GetModuleHandleW ExitProcess GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle RaiseException

user32

LoadStringA BeginPaint EnableWindow GetDlgItem SetDlgItemTextA IsDlgButtonChecked CreateWindowExA GetClientRect GetDC GetSystemMetrics LoadBitmapA CheckMenuRadioItem SetWindowTextA GetWindowLongA InsertMenuItemA ReleaseDC FillRect DefWindowProcA

gdi32

SelectObject GetPixel CreateRectRgn CreateCompatibleBitmap DPtoLP TextOutA CreateSolidBrush FrameRgn SetMapMode SetViewportExtEx DeleteObject PatBlt CreateCompatibleDC

ole32

CoInitialize CoInitializeEx CoUninitialize CoCreateInstance

winmm

mmioClose mmioWrite mmioCreateChunk mmioOpenA

comctl32

ord17 InitCommonControlsEx

gdiplus

GdipSaveImageToFile GdipCreateBitmapFromFile GdipCreateBitmapFromHBITMAP GdipCreateHBITMAPFromBitmap GdiplusStartup GdipDisposeImage