tmpzzv3vq7i

General

Target
tmpzzv3vq7i
Size 269KB
Sample260602-e3hvcadx7w
SHA256 f66f5dc39fe2afc4d50d974f8e49c7540d6d1dff7d7433b8da2acc92dcedd47b
MD5 1e73885da9e9ce95120a4a11a7ac6930
SHA1 b33479b5483214fa02ecd747e484e8777b17644a
SHA512 dbcdd93dc9468beace86788c7faa7330b906ff1070e6a1f82dbb21b70eb557e0546a47c7cad45c2c805cecbbc07a49139fb6f4c05b2084990ae05ad6cd525ea0
SSDEEP 6144:LU6t/XL0KrEoAMKmJLhUGkFZmp6T8sEZIlJ3iRkW5f9:AEYKrEGKmlhUGSmC8vqJU5l
TLSH
T1D04412532AF41939E0B6C9727DF063D1F97BF67226B5E44E326201069D2ACC1EE31B19
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpzzv3vq7i

File Explorer

tmpzzv3vq7i

.exe 269KB

IMPHASH 13bc53cb99aef05a732aad00da3e47ed
SHA256 f66f5dc39fe2afc4d50d974f8e49c7540d6d1dff7d7433b8da2acc92dcedd47b
MD5 1e73885da9e9ce95120a4a11a7ac6930
SHA1 b33479b5483214fa02ecd747e484e8777b17644a
SHA512 dbcdd93dc9468beace86788c7faa7330b906ff1070e6a1f82dbb21b70eb557e0546a47c7cad45c2c805cecbbc07a49139fb6f4c05b2084990ae05ad6cd525ea0
SSDEEP 6144:LU6t/XL0KrEoAMKmJLhUGkFZmp6T8sEZIlJ3iRkW5f9:AEYKrEGKmlhUGSmC8vqJU5l
TLSH
T1D04412532AF41939E0B6C9727DF063D1F97BF67226B5E44E326201069D2ACC1EE31B19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15243

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentThreadId SetThreadPriority ReadFile MapViewOfFile CompareStringA SetLastError FlushFileBuffers HeapFree GetSystemDirectoryA GetSystemTimeAsFileTime SystemTimeToFileTime LocalFree WaitForSingleObject GetLocalTime IsDebuggerPresent EnterCriticalSection GetFileInformationByHandle CompareFileTime GlobalMemoryStatus MoveFileExW SetFilePointer SetUnhandledExceptionFilter CloseHandle GetUserDefaultLCID GetSystemInfo GetFileType GetVolumeNameForVolumeMountPointW SetEndOfFile InitializeCriticalSectionAndSpinCount GetWindowsDirectoryA LocalAlloc CreateThread RaiseException GetFileSize GetSystemTime GetProcessHeap GetModuleHandleA FreeLibrary DeleteCriticalSection IsValidLocale UnhandledExceptionFilter HeapValidate HeapAlloc GetVolumePathNameW LeaveCriticalSection WriteFile UnmapViewOfFile FileTimeToSystemTime ReleaseMutex LoadLibraryA VirtualAllocEx

user32

SetTimer TranslateMessage PostThreadMessageA KillTimer DestroyWindow GetMessageA IsWindow

advapi32

GetSecurityDescriptorLength GetFileSecurityW SetSecurityDescriptorDacl IsValidSecurityDescriptor SetFileSecurityW RegCloseKey GetSecurityDescriptorControl InitializeSecurityDescriptor

ntprint

PSetupFreeMem PSetupGetSelectedDriverInfo PSetupInstallICMProfiles PSetupDestroyPrinterDeviceInfoList PSetupGetLocalDataField

wsnmp32

SnmpDuplicateVbl SnmpCleanup SnmpGetTimeout

Sharing