tmpvsixo2ar

Sharing

Copy URL Twitter E-mail

General

Target
tmpvsixo2ar
Size 263KB
Sample260602-e6rxese19l
SHA256 114bbe67e60dfacac769cc7472ec6341510a57c55d4d63604172b58a4fa841ca
MD5 1879b18b60d1143c8856c11d8a9a402e
SHA1 a7ae618d513b6ee0435d6b8ca3f24ee156b11ceb
SHA512 4c48d988e080c3383f861ec4454d237876fe6a83234640f470daef56678df68a6073e6fd8b6dd905d25991e7bf63a2d0875a801ba6f17fe07aa9dda74d86682b
SSDEEP 6144:O/gIBjsg+6svLS0NYo2KDlZ9MnHnjnXZu0FQ44:O/hsg+6sve0WUv9MnHnLXw0iP
TLSH
T111441222D111675BD4B18DB488EF9D069B64349B2322473EAB54D8281CF3F3AFDD6A70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpvsixo2ar

File Explorer

tmpvsixo2ar

.exe 263KB

IMPHASH f03159bc26b4245304d2d8a7585f6c89
SHA256 114bbe67e60dfacac769cc7472ec6341510a57c55d4d63604172b58a4fa841ca
MD5 1879b18b60d1143c8856c11d8a9a402e
SHA1 a7ae618d513b6ee0435d6b8ca3f24ee156b11ceb
SHA512 4c48d988e080c3383f861ec4454d237876fe6a83234640f470daef56678df68a6073e6fd8b6dd905d25991e7bf63a2d0875a801ba6f17fe07aa9dda74d86682b
SSDEEP 6144:O/gIBjsg+6svLS0NYo2KDlZ9MnHnjnXZu0FQ44:O/hsg+6sve0WUv9MnHnLXw0iP
TLSH
T111441222D111675BD4B18DB488EF9D069B64349B2322473EAB54D8281CF3F3AFDD6A70
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW GetLastError GetTickCount GetCurrentProcess MultiByteToWideChar GetSystemDirectoryW GetVersionExA GetProcessHeap GetStartupInfoW SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA TlsAlloc GetCurrentThreadId HeapCreate ExitProcess GetModuleFileNameA GetEnvironmentStringsW GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetStringTypeA GetStringTypeW Sleep GetLocaleInfoA InitializeCriticalSection LoadLibraryA BeginUpdateResourceW GetProcAddress

user32

GetSystemMetrics GetIconInfo SetCapture IsWindow EnumWindows LoadMenuW DefWindowProcA GetDesktopWindow GetMenuStringW SetMenu PostMessageA SetTimer CharLowerA GetCapture GetDlgItemTextA AppendMenuW GetScrollPos CreateAcceleratorTableW GetMenuItemID GetDCEx WaitForInputIdle SetWindowRgn GetSysColor SetCursor GetActiveWindow ActivateKeyboardLayout CreateWindowExA

advapi32

RegSetValueExW RegCloseKey RegCreateKeyExW RegOpenKeyExW RegDeleteKeyW CloseServiceHandle StartServiceW OpenServiceW OpenSCManagerW

mssip32

CryptSIPGetSignedDataMsg CryptSIPRemoveSignedDataMsg DllRegisterServer

gdi32

TranslateCharsetInfo CreatePatternBrush CreateDIBSection GetTextExtentPointA SetEnhMetaFileBits CreateBitmap CreateICA

sfc

SRSetRestorePointA SfpVerifyFile SRSetRestorePointW SfcGetNextProtectedFile SRSetRestorePoint

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ugr

Size

4KB

Virtual Size

434KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Vw

Size

3KB

Virtual Size

311KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

77KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.GNorl

Size

4KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.GZ

Size

512B

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

139KB

Virtual Size

199KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.DGxYI

Size

2KB

Virtual Size

411KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmpvsixo2ar

kernel32

user32

advapi32

mssip32

gdi32

sfc

generic