tmpvxmx67h0

General

Target
tmpvxmx67h0
Size 532KB
Sample260601-v5cdcads8m
SHA256 dacceec8666e59381f179693237c129abd78ac4fe3876c7d53c8127c257a5e4b
MD5 bc0978eea6e8fc1e392343399f6d0bbd
SHA1 60046c899b7ca1c8e0d9aee54b8404bc926ced43
SHA512 1ff9a2933ab059ee1e195e0a5c136a3924616dd96b1ad3812edca60d0bb1eaf348e07125d760ef185d31945e591e1f1217a6fb8d7ac147eef9c00e129f2e838b
SSDEEP 12288:4ABtGlgyVrcERYcUmLKJveV8ra3KMPj9Hrer5+nZoy:aHPRYcUmZauPjBb
TLSH
T1D2C46D0AF2B1BCD3D9324F319D2986E4732EB852DE15276B2594671F4C721B4CE62B38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpvxmx67h0

File Explorer

tmpvxmx67h0

.exe 532KB

IMPHASH 019a1de5e7f5ffb60a4f12c17d546386
SHA256 dacceec8666e59381f179693237c129abd78ac4fe3876c7d53c8127c257a5e4b
MD5 bc0978eea6e8fc1e392343399f6d0bbd
SHA1 60046c899b7ca1c8e0d9aee54b8404bc926ced43
SHA512 1ff9a2933ab059ee1e195e0a5c136a3924616dd96b1ad3812edca60d0bb1eaf348e07125d760ef185d31945e591e1f1217a6fb8d7ac147eef9c00e129f2e838b
SSDEEP 12288:4ABtGlgyVrcERYcUmLKJveV8ra3KMPj9Hrer5+nZoy:aHPRYcUmZauPjBb
TLSH
T1D2C46D0AF2B1BCD3D9324F319D2986E4732EB852DE15276B2594671F4C721B4CE62B38
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA FindResourceA GlobalCompact GetCPInfo FindResourceW GetConsoleAliasA CreateHardLinkA OutputDebugStringW GetTickCount GetConsoleAliasesLengthA GetNumberFormatA GetUserDefaultLangID GlobalAlloc GlobalFindAtomA LoadLibraryW IsBadStringPtrA OpenMutexW GetLastError SetLastError GetProcAddress SetFileAttributesA LoadLibraryA InterlockedExchangeAdd FindFirstVolumeMountPointW GetDiskFreeSpaceA EnumResourceTypesW LoadLibraryExA lstrcatW BuildCommDCBA TerminateJobObject GetWindowsDirectoryW OpenFileMappingA WriteProcessMemory CreateFileW WriteConsoleW HeapFree GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW HeapCreate HeapAlloc SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle RtlUnwind WideCharToMultiByte GetACP GetOEMCP IsValidCodePage HeapSize RaiseException HeapReAlloc IsProcessorFeaturePresent GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CloseHandle

user32

GetKeyboardLayoutNameW DdeCmpStringHandles GetCaretPos GetWindowTextLengthA

Name

.text

Size

234KB

Virtual Size

233KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

WaHWFoXd

Size

32KB

Virtual Size

31KB

Characteristics

Name

cQzfKNFG

Size

512B

Virtual Size

196B

Characteristics

Name

hnDZZmZT

Size

114KB

Virtual Size

114KB

Characteristics

Name

TitGNAdl

Size

4KB

Virtual Size

3KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

tmpvxmx67h0

kernel32

user32

generic