tmpc9h5s_l_

Sharing

Copy URL Twitter E-mail

General

Target
tmpc9h5s_l_
Size 253KB
Sample260522-ta5kzagw2m
SHA256 85c5658a26849a2410590ad09d6dc2dd1478e7f7d497245b6628037359b99b69
MD5 3377a9623d7db99a327c04e66d144d08
SHA1 936cf0ff57152256457cb571d0eae89d92b1b696
SHA512 234b545e9f01c4a86ef76e96573e9d024679963645464d7af14dd161cc241f89a95f3f5eed9c9e000854d407315bb34148207aee49ba20e2c8ba50427a11dbfc
SSDEEP 3072:oaSh7D7ktA9SWq5TwnVW2BlnOfJcrhfiF7iH7sD/wVrVZsqTFzpA0tOojB5s03hb:kbkgx82eShqligDW/yAOotdhk/wB7DeS
TLSH
T13C4412DBDADA0012EA5D083482B706566279F51763924A6B1230BB0CEF79CDCF5BB49C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpc9h5s_l_

File Explorer

tmpc9h5s_l_

.exe 253KB

IMPHASH 2128f7888f2c622b637401702af2fa3b
SHA256 85c5658a26849a2410590ad09d6dc2dd1478e7f7d497245b6628037359b99b69
MD5 3377a9623d7db99a327c04e66d144d08
SHA1 936cf0ff57152256457cb571d0eae89d92b1b696
SHA512 234b545e9f01c4a86ef76e96573e9d024679963645464d7af14dd161cc241f89a95f3f5eed9c9e000854d407315bb34148207aee49ba20e2c8ba50427a11dbfc
SSDEEP 3072:oaSh7D7ktA9SWq5TwnVW2BlnOfJcrhfiF7iH7sD/wVrVZsqTFzpA0tOojB5s03hb:kbkgx82eShqligDW/yAOotdhk/wB7DeS
TLSH
T13C4412DBDADA0012EA5D083482B706566279F51763924A6B1230BB0CEF79CDCF5BB49C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject CreateEventW FreeLibrary RemoveDirectoryW GetTempPathW GetTempFileNameW lstrcpynW GetModuleHandleW lstrlenA lstrlenW OpenEventW CompareFileTime CreateMutexW ExpandEnvironmentStringsA GetCurrentThreadId IsDebuggerPresent SetUnhandledExceptionFilter lstrcatW lstrcmpW GetLocalTime ExpandEnvironmentStringsW lstrcpynA SystemTimeToFileTime FileTimeToSystemTime GetTimeFormatW GetDateFormatW GetVolumeInformationW GetSystemDirectoryW GetWindowsDirectoryW LocalAlloc LocalFree CreateDirectoryW LoadLibraryA GetProcAddress

user32

GetForegroundWindow GetActiveWindow MessageBoxW MoveWindow GetTopWindow RegisterWindowMessageW SetTimer LoadCursorW GetSystemMetrics LoadIconW CopyRect GetSysColor PeekMessageW IsWindow EnumWindows PostMessageW GetCursorPos DestroyIcon GetFocus InvalidateRect LoadMenuW GetSubMenu EnableMenuItem CheckMenuItem OffsetRect SetWindowPos LoadImageW SendMessageW EnableWindow

gdi32

CreatePatternBrush DeleteObject CreateSolidBrush CreatePen CreateRectRgn GetStockObject CreateCompatibleDC CreateFontIndirectW

advapi32

AddAccessAllowedAce RegOpenKeyExA RegQueryValueExA QueryServiceConfigW ChangeServiceConfigW DeleteService ControlService OpenServiceW StartServiceW QueryServiceStatus OpenSCManagerW CreateServiceW CloseServiceHandle LookupPrivilegeValueW AdjustTokenPrivileges RegDeleteKeyW RegCreateKeyExW RegDeleteValueW RegSetValueExW FreeSid RegEnumKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey ImpersonateSelf OpenThreadToken OpenProcessToken AllocateAndInitializeSid InitializeSecurityDescriptor GetLengthSid InitializeAcl SetSecurityDescriptorDacl RevertToSelf SetSecurityDescriptorGroup SetSecurityDescriptorOwner IsValidSecurityDescriptor AccessCheck GetUserNameW

shell32

ShellExecuteW ShellExecuteExW

ole32

CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysAllocStringLen SysFreeString

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

uxtheme

GetThemeFont GetThemeBackgroundExtent GetThemeSysBool GetThemeInt GetThemeColor GetCurrentThemeName GetThemeBool

certmgr

DllUnregisterServer DllRegisterServer DllCanUnloadNow DllInstall

Name

.text

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Mvf

Size

1024B

Virtual Size

118KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ouxdt

Size

3KB

Virtual Size

563KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hOC

Size

74KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

5KB

Virtual Size

895KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hUG

Size

2KB

Virtual Size

575KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

6KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Qlxfk

Size

512B

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ij

Size

138KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmpc9h5s_l_

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

version

uxtheme

certmgr

generic