tmpwqyzskmk

Sharing

Copy URL Twitter E-mail

General

Target
tmpwqyzskmk
Size 264KB
Sample260602-es96vaez3k
SHA256 ba32c4c658139f2d6eeb2d6738b94a3fb00348193b6fbb7d0c6607ecf98a6026
MD5 385bf84d7d14e4bb073ced9f15a7d38c
SHA1 7d326eecef966e104365cbe5f331ec46d70e9da5
SHA512 ccdd1e7cc0e60d8def54c400d89343b4920661b5576d9f770f63bb9cf2302002d155a5589eec51cfaa15bf6b2fbb5b04e4ac430255da6d50892da00af1b82f60
SSDEEP 6144:OMnEC395ZK8Ek3RdS4+xsofQKIOCuInQ0YMZxxN30L:OrCvZho4+DIFnQ0RU
TLSH
T1BC441232A6900A6BC05315B418EFFCB1B6FC9C4953285B623E819D1B3DF3350A975BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
tmpwqyzskmk

File Explorer

tmpwqyzskmk

.exe 264KB

IMPHASH 29fd5ddf7bd9ccdca7440eb944aebe93
SHA256 ba32c4c658139f2d6eeb2d6738b94a3fb00348193b6fbb7d0c6607ecf98a6026
MD5 385bf84d7d14e4bb073ced9f15a7d38c
SHA1 7d326eecef966e104365cbe5f331ec46d70e9da5
SHA512 ccdd1e7cc0e60d8def54c400d89343b4920661b5576d9f770f63bb9cf2302002d155a5589eec51cfaa15bf6b2fbb5b04e4ac430255da6d50892da00af1b82f60
SSDEEP 6144:OMnEC395ZK8Ek3RdS4+xsofQKIOCuInQ0YMZxxN30L:OrCvZho4+DIFnQ0RU
TLSH
T1BC441232A6900A6BC05315B418EFFCB1B6FC9C4953285B623E819D1B3DF3350A975BB6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

46:6f:96:c1:5e:0b:0b:96:a6:e9:f7:65:bd:19:d4:7f:c5:dd:51:25

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Foxit Software Company,OU=SECURE APPLICATION DEVELOPMENT,O=Foxit Software Company,L=San Jose,ST=California,C=US

Chains

May 27, 2026

CN=Foxit Software Company,OU=SECURE APPLICATION DEVELOPMENT,O=Foxit Software Company,L=San Jose,ST=California,C=US

Minor OS version

Major OS version

Entry point

7992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatW SetEvent FileTimeToSystemTime GetEnvironmentVariableA lstrlenA OpenMutexW TlsAlloc GlobalGetAtomNameA GetCalendarInfoA CreateDirectoryA lstrcmpW IsBadReadPtr LoadLibraryA GetTempFileNameW OpenSemaphoreW CopyFileExA FindAtomA MoveFileA GetProcAddress CreatePipe SetComputerNameW EnumTimeFormatsA GetWindowsDirectoryA RaiseException GetDiskFreeSpaceW GetSystemDirectoryA SetUnhandledExceptionFilter lstrcmpA GetVersionExW DeleteAtom lstrcat EnumDateFormatsA DuplicateHandle EnumCalendarInfoA GetACP CompareFileTime lstrlen IsBadStringPtrA SetErrorMode GetExitCodeThread lstrcpynA GetUserDefaultLangID FileTimeToDosDateTime GetModuleHandleA GetTimeFormatW SystemTimeToFileTime lstrcpynW ConnectNamedPipe lstrcatA ExpandEnvironmentStringsW GetUserDefaultLCID GetCurrentDirectoryW LoadResource WaitForMultipleObjects GetCurrentDirectoryA GetThreadPriority GetCPInfo ReadDirectoryChangesW InitializeCriticalSection CopyFileExW GetExpandedNameA GetStartupInfoW GetVersionExA GetAtomNameA GetTickCount SearchPathA EnumCalendarInfoW GetWindowsDirectoryW EnumDateFormatsW FreeLibrary LoadLibraryA SearchPathW OpenEventW GetFileAttributesW SetLocaleInfoA LoadLibraryW CreateNamedPipeA FatalAppExitW GlobalFindAtomW OpenWaitableTimerA lstrcmpiW GetLongPathNameW GetSystemDirectoryW GlobalFindAtomA GetLogicalDrives SetLocaleInfoW WinExec GetLogicalDriveStringsA GetEnvironmentStringsA GetMailslotInfo LocalAlloc QueryPerformanceFrequency GetEnvironmentVariableW GetSystemInfo GetLogicalDriveStringsW GetOEMCP

user32

GetClassInfoA mouse_event wvsprintfW GetDCEx EnableWindow CreateDesktopW EnableMenuItem LoadBitmapA WaitMessage GetMenuStringA GetCapture LoadIconW keybd_event wvsprintfA LoadIconA CreateDialogParamA RegisterClassA SetDlgItemTextA GetIconInfo GetMenuStringW InsertMenuItemW CharPrevA RegisterWindowMessageW SetWindowTextW TrackPopupMenuEx GetMenuItemInfoA ShowCaret SendDlgItemMessageA LoadCursorW GetMenuItemID OpenClipboard GetSysColorBrush DestroyCursor RemoveMenu wsprintfW TrackPopupMenu LoadBitmapW UnregisterClassW OffsetRect SetCursor FindWindowA EndMenu wsprintfA DialogBoxIndirectParamA RegisterClassExA GetKeyState CharNextA LoadMenuW SetParent RegisterClassExW AdjustWindowRect SendDlgItemMessageW GetMessageW ActivateKeyboardLayout GetClassInfoExA CheckMenuItem DialogBoxParamA PeekMessageW MoveWindow IsMenu GetMenuItemRect IsIconic CopyRect InvalidateRect GetMessageA GetActiveWindow SetFocus LoadMenuIndirectA SetDlgItemTextW LoadMenuA WinHelpW FindWindowW GetDlgItemTextW GetMenuInfo WaitForInputIdle SetCapture DefWindowProcA LoadMenuIndirectW SetTimer LoadCursorA IsWindow DialogBoxIndirectParamW MessageBoxIndirectW GetMenuState AppendMenuA CreateDialogParamW CharPrevW CreateAcceleratorTableA PeekMessageA GetCaretPos

gdi32

CreateICA RemoveFontResourceA CreateFontIndirectW AddFontResourceW CreatePen GetEnhMetaFilePixelFormat CreateMetaFileA CreateBitmap RemoveFontResourceExA RemoveFontResourceExW SetEnhMetaFileBits SetMetaFileBitsEx GetStockObject CreateColorSpaceA GetTextExtentPointA GdiGetBatchLimit CreateFontIndirectA CreateICW CreateDIBSection CreateCompatibleDC CreateHatchBrush GetRasterizerCaps RemoveFontResourceW CreatePolygonRgn GetEnhMetaFileW AddFontResourceA CreatePolyPolygonRgn CreateScalableFontResourceW CreateFontW GetEnhMetaFileA SetWinMetaFileBits CreateFontIndirectExW CreateFontIndirectExA UpdateICMRegKeyA CreateRectRgn GetTextExtentPointW CreateMetaFileW StretchDIBits ExtCreateRegion

advapi32

ChangeServiceConfig2A ConvertStringSecurityDescriptorToSecurityDescriptorW SystemFunction041 LsaOpenAccount

setupapi

SetupQueryFileLogW CM_Get_Device_ID_List_ExW SetupDiGetClassDevsExW SetupInstallFileW CM_Get_Class_Key_Name_ExW CM_Query_Arbitrator_Free_Data

ws2_32

send WSASendTo WSACloseEvent getprotobynumber getsockname WSASend htons WSADuplicateSocketA getpeername WSARecvDisconnect WSAEnumProtocolsW WSACleanup

winmm

auxGetDevCapsA DefDriverProc midiInAddBuffer midiInClose midiInOpen OpenDriver midiInGetDevCapsW wod32Message timeSetEvent

cryptui

CryptUIDlgViewContext CryptUIDlgSelectCA

oledlg

OleUIAddVerbMenuA OleUIAddVerbMenuW OleUIEditLinksA

Name

.text

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.eRHnl

Size

112KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.boNAmD

Size

111KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

311KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmpwqyzskmk

PE Signature issue

kernel32

user32

gdi32

advapi32

setupapi

ws2_32

winmm

cryptui

oledlg

generic