tmpazr1tzis

Sharing

Copy URL Twitter E-mail

General

Target
tmpazr1tzis
Size 2.1MB
Sample260602-cac3aaa13s
SHA256 7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115
MD5 40ee908eff9418d1cbcb36ea516ca34e
SHA1 e13e947f3ce59a2a58ce09c2d8888053d685fa44
SHA512 eedae343bf53411aa9a64e0f6ae9ee1ac15b6cdc02d94894604974e5d0ffcafc56f9df9afa368cab38a017785e559d75bb9dea95bffc78088048cf3b1ec7d639
SSDEEP 49152:AgbA0SNOgGbH+/mrzAnO5oEshZHFTdgmH:v20gGjnrzAZEIZHzgmH
TLSH
T181A5CF0EFBD31BECE397627BD8102479B9A01B356B11AB11350B2373A15DA0ACF554AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpazr1tzis

File Explorer

tmpazr1tzis

.dll 2.1MB

IMPHASH 379e1e30462ed6118b499ff7de80390e
SHA256 7df703625ee06db2786650b48ffefb13fa1f0dae41e521b861a16772e800c115
MD5 40ee908eff9418d1cbcb36ea516ca34e
SHA1 e13e947f3ce59a2a58ce09c2d8888053d685fa44
SHA512 eedae343bf53411aa9a64e0f6ae9ee1ac15b6cdc02d94894604974e5d0ffcafc56f9df9afa368cab38a017785e559d75bb9dea95bffc78088048cf3b1ec7d639
SSDEEP 49152:AgbA0SNOgGbH+/mrzAnO5oEshZHFTdgmH:v20gGjnrzAZEIZHzgmH
TLSH
T181A5CF0EFBD31BECE397627BD8102479B9A01B356B11AB11350B2373A15DA0ACF554AF
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rotext

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

603KB

Virtual Size

602KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tmpazr1tzis

kernel32

generic