tmp5c6h8xft

Sharing

Copy URL Twitter E-mail

General

Target
tmp5c6h8xft
Size 260KB
Sample260602-e9s9nafs3n
SHA256 f856fd4074c6ff4cbaa67c8b73e7acbf042fa2c5656030da4b5440403bb37c8f
MD5 13023a632a1905673278a5a01074d130
SHA1 a1426376c6ae90cde98ec55e53507d0496be176e
SHA512 67e9605dfd0c162bdbdeab291b90538d7c2415fbbfbb461b27251f428f230245b74b3a12fe6b91966352dfb0cb2ee95cde25297c00d4d45c0354bdc297a784ed
SSDEEP 6144:2iU2F6dN8jEzwnbWxOebOWRKdBfSdCG4D6Y:LU86nyUwnbjxT
TLSH
T15D441235D8D11DEFF58503785AF6637B8C6C40C0552ABA03C6D46DAE27618AF503EAF2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp5c6h8xft

File Explorer

tmp5c6h8xft

.exe 260KB

IMPHASH c2624146c00503a05d272ed73746e97b
SHA256 f856fd4074c6ff4cbaa67c8b73e7acbf042fa2c5656030da4b5440403bb37c8f
MD5 13023a632a1905673278a5a01074d130
SHA1 a1426376c6ae90cde98ec55e53507d0496be176e
SHA512 67e9605dfd0c162bdbdeab291b90538d7c2415fbbfbb461b27251f428f230245b74b3a12fe6b91966352dfb0cb2ee95cde25297c00d4d45c0354bdc297a784ed
SSDEEP 6144:2iU2F6dN8jEzwnbWxOebOWRKdBfSdCG4D6Y:LU86nyUwnbjxT
TLSH
T15D441235D8D11DEFF58503785AF6637B8C6C40C0552ABA03C6D46DAE27618AF503EAF2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

125363

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeKillEvent timeGetDevCaps timeGetTime PlaySoundA timeSetEvent

comdlg32

PrintDlgA GetSaveFileNameW GetOpenFileNameW

oleacc

LresultFromObject AccessibleObjectFromWindow

user32

GetClipboardData DeferWindowPos GetClassLongA PeekMessageA KillTimer SetTimer GetCaretBlinkTime LoadIconW GetCapture InflateRect CreateWindowExW EqualRect RegisterWindowMessageW DispatchMessageA IsIconic DefWindowProcW CreateWindowExA MoveWindow SetClipboardData GetSystemMenu ScrollWindowEx LoadStringW PostMessageW GetDC EndPaint SetWindowLongW DrawFrameControl CallNextHookEx DrawEdge GetDialogBaseUnits EndDeferWindowPos InvertRect GetParent OpenClipboard IsChild CloseClipboard GetMessageA GetKeyboardLayout EmptyClipboard GetClientRect UnregisterClassA DrawTextW ReleaseDC DrawIconEx GetSystemMetrics SetWindowLongA GetDesktopWindow CallWindowProcW SystemParametersInfoA DestroyCaret EnumClipboardFormats GetWindowThreadProcessId GetWindowLongW SetCursor GetWindowRect GetDlgCtrlID GetUpdateRect FlashWindow UpdateWindow CountClipboardFormats GetWindowDC SetForegroundWindow CreateCaret RegisterClassExW GetWindowLongA DrawTextA SetActiveWindow LoadCursorW GetClipboardSequenceNumber LoadCursorFromFileA ShowWindow PostQuitMessage CreateDialogIndirectParamW GetKeyState GetGuiResources GetDoubleClickTime SetFocus IsWindowEnabled OffsetRect GetActiveWindow CreateIconFromResourceEx GetClassInfoExW ScrollDC NotifyWinEvent DialogBoxIndirectParamW DestroyIcon SetWindowTextW GetSysColorBrush SetWindowsHookExW SendMessageA FillRect DefWindowProcA LoadCursorA RegisterClassW SetWindowPos WindowFromPoint UnregisterClassW MessageBeep EnableMenuItem IsWindowVisible PostMessageA BeginPaint SendMessageW DestroyWindow SetScrollInfo RegisterClipboardFormatW MapWindowPoints SendMessageTimeoutA MonitorFromWindow GetMenuState GetFocus IsClipboardFormatAvailable GetSysColor UnhookWindowsHookEx TranslateMessage GetCursorPos EnableWindow AdjustWindowRectEx IsWindowUnicode GetIconInfo GetMonitorInfoW EndDialog RegisterWindowMessageA PtInRect CopyRect GetWindowPlacement SetCaretPos GetWindow IsWindow GetAsyncKeyState ReleaseCapture RegisterClassExA GetScrollInfo CreateCursor GetWindowTextW RegisterClassA BeginDeferWindowPos AnimateWindow SetCapture InvalidateRect

kernel32

LoadLibraryExW AllocConsole VirtualAlloc FindClose GetModuleHandleW TlsAlloc ExitThread FlushInstructionCache DeleteCriticalSection SetUnhandledExceptionFilter GlobalSize LoadResource SizeofResource CreateMutexA SystemTimeToFileTime GetComputerNameA FindResourceW CloseHandle lstrlenW CreateEventA CreateFileW VirtualFree FindFirstFileW GetCurrencyFormatW GetTempFileNameA GetUserDefaultLCID SetThreadLocale LeaveCriticalSection SetStdHandle ProcessIdToSessionId EnterCriticalSection FindResourceExW GetSystemTimeAsFileTime LocalAlloc GlobalAlloc FormatMessageA GetStdHandle FindNextFileW IsProcessorFeaturePresent GetCurrentThreadId SetFilePointer TlsFree GetTimeZoneInformation CompareStringW WaitForSingleObject HeapDestroy GetDateFormatW IsDebuggerPresent CreateFileMappingA TlsSetValue CreateFileA SetEndOfFile HeapReAlloc FlushViewOfFile WaitForMultipleObjects GetTimeFormatW LockResource lstrlenA GetSystemTime GlobalLock HeapAlloc HeapFree MapViewOfFile UnhandledExceptionFilter CreateThread RaiseException GetProcessHeap GetNumberFormatW FileTimeToSystemTime GlobalFree UnmapViewOfFile MulDiv WriteFile TlsGetValue GetLocalTime CreatePipe SetLastError GlobalUnlock GetTempPathA FreeLibrary OutputDebugStringW ReadFile HeapSize FindResourceA GetFileSize GetThreadLocale SetHandleInformation FlushFileBuffers WideCharToMultiByte VirtualAllocEx

wininet

InternetSetOptionA InternetCombineUrlA InternetGetLastResponseInfoA HttpSendRequestA InternetOpenA HttpOpenRequestA InternetQueryOptionA InternetReadFile HttpQueryInfoA InternetCloseHandle InternetConnectA InternetErrorDlg

imm32

ImmGetContext ImmGetCompositionStringW ImmReleaseContext ImmAssociateContextEx ImmSetCandidateWindow ImmAssociateContext ImmIsIME ImmNotifyIME

gdi32

GetLayout GdiFlush GetTextExtentPoint32A GetClipBox StartPage GetMapMode GetCharacterPlacementW SelectObject CreateHatchBrush GetTextExtentExPointW SetViewportExtEx GetDIBits StartDocA CreateDIBPatternBrushPt EndDoc TextOutA CombineRgn GetDeviceCaps TextOutW GetTextAlign GetFontLanguageInfo GetWindowExtEx CreatePatternBrush StretchDIBits StretchBlt CreatePen SetTextAlign DPtoLP SetBkMode SetStretchBltMode ExcludeClipRect GetObjectA CreateCompatibleDC SetViewportOrgEx CreateBitmap AddFontMemResourceEx GetCurrentObject RectVisible RestoreDC EndPage GetGlyphOutlineW GetPixel SaveDC CreateDIBSection SetMapMode CreateRectRgnIndirect EnumFontFamiliesExW BitBlt SetWindowOrgEx GetTextMetricsA DeleteDC IntersectClipRect LPtoDP GetStockObject CreateFontA CreateSolidBrush PatBlt SetLayout EnumFontFamiliesExA GetWindowOrgEx SetBrushOrgEx SetBkColor SetPixel RoundRect GetTextExtentPoint32W SetWindowExtEx GetViewportExtEx GetKerningPairsA CreateCompatibleBitmap SetTextColor Rectangle DeleteObject

oleaut32

SysAllocStringLen

comctl32

ImageList_GetImageInfo ImageList_GetIconSize ImageList_DrawEx

urlmon

FindMimeFromData

ole32

RevokeDragDrop ReleaseStgMedium DoDragDrop RegisterDragDrop OleInitialize CoCreateGuid CoCreateInstance

esent

JetStopServiceInstance JetResetSessionContext JetSetTableSequential JetGetTableIndexInfo JetDeleteColumn2 JetSetCurrentIndex3 JetGotoSecondaryIndexBookmark JetBackup JetPrepareToCommitTransaction JetCreateTableColumnIndex2 JetSetSessionContext JetBeginExternalBackup JetDupSession JetCloseFile JetCreateInstance

url

FileProtocolHandlerA

Name

.sHwL

Size

2KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.hPleK

Size

2KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.hLVF

Size

2KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_MEM_READ

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.jHAj

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hGWO

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CdnUxIH

Size

1024B

Virtual Size

830B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.MNugX

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

6KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Mflg

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

215KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.PZCHTIN

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ikKbhxu

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.uitXqt

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

tmp5c6h8xft

winmm

comdlg32

oleacc

user32

kernel32

wininet

imm32

gdi32

oleaut32

comctl32

urlmon

ole32

esent

url

generic