tmp6yr6c7ig

General

Target
tmp6yr6c7ig
Size 1.3MB
Sample260601-vbexdact3p
SHA256 492c123dedeeb490b4b7b45cdcae600e057bd941cff37e9e4f021b94ccdd2e54
MD5 6c08dc8247bf3c4b1df63a50f82b6e36
SHA1 4f1441f45ec205e77a0d19cc63b031755de41f31
SHA512 5ad7b5dff75a5484c29346ae887f1232379e067fa92a7caaf0d1ecd79ce063a58fc2e51c990fca1bb7911335d4f912f0ecb7daa9d7feb92a53cdd7cff7a19989
SSDEEP 24576:Ib48UTJeeQ3mnKbXj0cZYlGT27e8nMrXZ18tIdApl:IbiTJeX3mnKbXj0cZ+Gq7vnMrXZ1An
TLSH
T1B555D191E0C39093FB9360B0332DD09D6826EBE3E71D0DDB5168E72855AAEDB057712B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp6yr6c7ig

File Explorer

tmp6yr6c7ig

.exe 1.3MB

IMPHASH 87da6c25a9600b37b923748e5d75d63a
SHA256 492c123dedeeb490b4b7b45cdcae600e057bd941cff37e9e4f021b94ccdd2e54
MD5 6c08dc8247bf3c4b1df63a50f82b6e36
SHA1 4f1441f45ec205e77a0d19cc63b031755de41f31
SHA512 5ad7b5dff75a5484c29346ae887f1232379e067fa92a7caaf0d1ecd79ce063a58fc2e51c990fca1bb7911335d4f912f0ecb7daa9d7feb92a53cdd7cff7a19989
SSDEEP 24576:Ib48UTJeeQ3mnKbXj0cZYlGT27e8nMrXZ18tIdApl:IbiTJeX3mnKbXj0cZ+Gq7vnMrXZ1An
TLSH
T1B555D191E0C39093FB9360B0332DD09D6826EBE3E71D0DDB5168E72855AAEDB057712B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

897920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_ISOLATION IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnumClipboardFormats

kernel32

AcquireSRWLockExclusive CloseHandle CloseThreadpoolWork CompareStringW CreateEventW CreateFileW CreateThreadpoolWork DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary FreeLibraryWhenCallbackReturns GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceBeginInitialize InitOnceComplete InitializeConditionVariable InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableCS SleepConditionVariableSRW SubmitThreadpoolWork TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

971KB

Virtual Size

972KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.open

Size

290KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

tmp6yr6c7ig

user32

kernel32

generic