tmpng1t3s86

Sharing

Copy URL Twitter E-mail

General

Target
tmpng1t3s86
Size 259KB
Sample260602-e6cshae19j
SHA256 0ae8a1ff60b651109b5c6272e6b5981ea5fc38b89737f1f05f5bdf77eb478895
MD5 198aede7532ca296cc743b100d428671
SHA1 bd649a52022ab45af0bed9382017dffe89c1c4d5
SHA512 0a6e5a3799592c7f2d9eb8b0e5d6cb98a989a027e5f866ce4d5d8fb661eb0bed8472e076afbfcc6fb3466a033de36b803f16889787994d671afd78b21d20e06a
SSDEEP 6144:zMThX2hFbGr5t3IMxi5jR0qMqV4m9mDcSbO82Logn:KhX2/wt4M8sqMqVPmDcCW
TLSH
T176441203BFAD5966C5EA98763B7B230F4CECC0E1FA14605F25C6294E7E9AA16F035340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpng1t3s86

File Explorer

tmpng1t3s86

.exe 259KB

IMPHASH a35f7106e12bfdf0078048d413d7c372
SHA256 0ae8a1ff60b651109b5c6272e6b5981ea5fc38b89737f1f05f5bdf77eb478895
MD5 198aede7532ca296cc743b100d428671
SHA1 bd649a52022ab45af0bed9382017dffe89c1c4d5
SHA512 0a6e5a3799592c7f2d9eb8b0e5d6cb98a989a027e5f866ce4d5d8fb661eb0bed8472e076afbfcc6fb3466a033de36b803f16889787994d671afd78b21d20e06a
SSDEEP 6144:zMThX2hFbGr5t3IMxi5jR0qMqV4m9mDcSbO82Logn:KhX2/wt4M8sqMqVPmDcCW
TLSH
T176441203BFAD5966C5EA98763B7B230F4CECC0E1FA14605F25C6294E7E9AA16F035340
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24721

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetReadFile HttpOpenRequestA InternetGetLastResponseInfoA InternetCloseHandle InternetQueryOptionA HttpQueryInfoA InternetConnectA InternetOpenA InternetCombineUrlA InternetSetOptionA InternetErrorDlg HttpSendRequestA

oleacc

AccessibleObjectFromWindow LresultFromObject

comdlg32

PrintDlgA GetOpenFileNameW GetSaveFileNameW

gdi32

GdiFlush GetFontLanguageInfo SetBkMode GetCharacterPlacementW CreateBitmap SetTextColor EnumFontFamiliesExA GetDIBits EndDoc GetStockObject RoundRect BitBlt CreateDIBPatternBrushPt SetViewportOrgEx GetGlyphOutlineW SetTextAlign ExcludeClipRect StretchDIBits GetMapMode GetTextExtentPoint32W IntersectClipRect SaveDC GetClipBox Rectangle CreateDIBSection PatBlt SetBrushOrgEx CreateHatchBrush SetStretchBltMode TextOutW CreatePen SetLayout SetWindowOrgEx GetTextMetricsA CreateFontA CombineRgn GetObjectA TextOutA GetTextExtentExPointW EndPage SetViewportExtEx SetWindowExtEx StartDocA GetKerningPairsA SetBkColor StartPage GetTextAlign GetCurrentObject GetTextExtentPoint32A DPtoLP CreateCompatibleDC GetPixel DeleteDC GetWindowExtEx DeleteObject SetPixel CreatePatternBrush GetLayout SelectObject GetDeviceCaps GetWindowOrgEx CreateCompatibleBitmap StretchBlt RestoreDC CreateSolidBrush CreateRectRgnIndirect GetViewportExtEx EnumFontFamiliesExW LPtoDP SetMapMode AddFontMemResourceEx RectVisible

kernel32

HeapFree SetFilePointer HeapAlloc VirtualAlloc GetTimeFormatW TlsFree GetCurrencyFormatW AllocConsole WaitForSingleObject GetFileSize ProcessIdToSessionId CloseHandle GetUserDefaultLCID SetThreadLocale FlushInstructionCache VirtualFree CreateFileMappingA SizeofResource GetDateFormatW GetStdHandle SetHandleInformation GetLocalTime FindResourceW ReadFile SystemTimeToFileTime IsProcessorFeaturePresent FreeLibrary LoadLibraryExW FindNextFileW GlobalUnlock lstrlenA GlobalSize TlsGetValue CompareStringW IsDebuggerPresent FileTimeToSystemTime LoadResource EnterCriticalSection GetComputerNameA GetSystemTime CreateEventA FormatMessageA MulDiv CreateMutexA GetTimeZoneInformation GetModuleHandleW TlsAlloc MapViewOfFile CreateFileW FindClose HeapSize HeapDestroy lstrlenW FlushFileBuffers HeapReAlloc GetThreadLocale SetEndOfFile UnhandledExceptionFilter DeleteCriticalSection FindResourceExW FindFirstFileW WriteFile GetCurrentThreadId TlsSetValue WideCharToMultiByte LockResource FindResourceA SetUnhandledExceptionFilter LeaveCriticalSection GetProcessHeap OutputDebugStringW LocalAlloc FlushViewOfFile ExitThread GlobalLock GetSystemTimeAsFileTime RaiseException UnmapViewOfFile CreateFileA WaitForMultipleObjects GetTempPathA GetTempFileNameA SetLastError GlobalFree SetStdHandle CreatePipe GetNumberFormatW CreateThread GlobalAlloc GetStartupInfoA VirtualAllocEx

urlmon

FindMimeFromData

imm32

ImmNotifyIME ImmIsIME ImmGetContext ImmAssociateContextEx ImmAssociateContext ImmSetCandidateWindow ImmReleaseContext ImmGetCompositionStringW

comctl32

ImageList_DrawEx ImageList_GetIconSize ImageList_GetImageInfo

user32

GetAsyncKeyState SetWindowPos GetDoubleClickTime FillRect DrawEdge GetGuiResources TranslateMessage WindowFromPoint DrawTextA ReleaseDC PostQuitMessage IsWindowEnabled BeginPaint PostMessageW OffsetRect LoadCursorA DefWindowProcA SetClipboardData RegisterWindowMessageW AdjustWindowRectEx MessageBeep SetCapture GetIconInfo GetWindowDC SetForegroundWindow SetWindowsHookExW SetTimer CloseClipboard GetSystemMetrics BeginDeferWindowPos GetUpdateRect CreateWindowExA GetScrollInfo RegisterClassExA GetSysColor GetClientRect GetMenuState DefWindowProcW PostMessageA SystemParametersInfoA CallNextHookEx ScrollDC DestroyIcon GetWindowPlacement GetWindowTextW GetDialogBaseUnits RegisterClassExW GetClipboardSequenceNumber GetClassLongA RegisterClassW GetSysColorBrush IsChild CreateWindowExW GetWindow InvalidateRect IsWindowVisible SetCursor DeferWindowPos SetWindowLongW SetWindowTextW GetWindowThreadProcessId CallWindowProcW SendMessageW DestroyCaret SetActiveWindow GetCaretBlinkTime GetActiveWindow PeekMessageA CopyRect IsClipboardFormatAvailable GetWindowLongW CountClipboardFormats UnregisterClassW EndDialog EndPaint DialogBoxIndirectParamW CreateCursor LoadCursorW GetMonitorInfoW EmptyClipboard GetMessageA EnableWindow MapWindowPoints SetCaretPos ScrollWindowEx UnhookWindowsHookEx IsWindowUnicode ReleaseCapture DrawTextW ShowWindow GetWindowLongA PtInRect RegisterClipboardFormatW RegisterClassA MonitorFromWindow IsWindow EnumClipboardFormats LoadStringW DrawFrameControl GetClassInfoExW IsIconic EnableMenuItem UnregisterClassA EqualRect SendMessageTimeoutA EndDeferWindowPos GetCapture SetWindowLongA CreateDialogIndirectParamW NotifyWinEvent DestroyWindow GetParent LoadIconW GetDesktopWindow CreateCaret GetKeyState GetDlgCtrlID LoadCursorFromFileA MoveWindow SetScrollInfo InvertRect InflateRect SetFocus AnimateWindow GetSystemMenu GetDC GetCursorPos GetFocus GetWindowRect GetClipboardData OpenClipboard DispatchMessageA KillTimer UpdateWindow DrawIconEx GetKeyboardLayout FlashWindow CreateIconFromResourceEx RegisterWindowMessageA SendMessageA

ole32

ReleaseStgMedium CoCreateGuid DoDragDrop CoCreateInstance OleInitialize RevokeDragDrop RegisterDragDrop

oleaut32

SysAllocStringLen

winmm

timeSetEvent timeGetTime PlaySoundA timeGetDevCaps timeKillEvent

esent

JetFreeBuffer JetSetColumn JetOpenTempTable JetGetSystemParameter JetTruncateLog JetMakeKey JetCreateInstance JetGetCurrentIndex JetGetSecondaryIndexBookmark JetDefragment JetEndSession

colbact

PartitionAccessCheck GetClassInfoForCurrentUser GetDefaultPartitionForSid GetDefaultPartitionForCurrentUser

Name

.DWTQiC

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.VlzF

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sqUxn

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.WvofIO

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hfrBl

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

242KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

215KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.XzWS

Size

1024B

Virtual Size

825B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.QpqOi

Size

1024B

Virtual Size

854B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.npDBI

Size

512B

Virtual Size

139B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qKwY

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmpng1t3s86

wininet

oleacc

comdlg32

gdi32

kernel32

urlmon

imm32

comctl32

user32

ole32

oleaut32

winmm

esent

colbact

generic