tmp1jb75918

Sharing

Copy URL Twitter E-mail

General

Target
tmp1jb75918
Size 206KB
Sample260602-ev8e2aez4p
SHA256 bec98fbf9dceb054e524da716944fe66cd72f56a7a9478449472d02d07ce63de
MD5 27f90d8c65af0a37fecb226e6b4bfc69
SHA1 35338f452e4444f60196b75bbf3fbd8ac9fa4367
SHA512 9ffeff730b5684637bfef5a7ab2059ed0e9ee7abf49558b680db92ff73347e010ec044308e5779b0087024dc67e65c7c49a3ca8abd17146915caea76774f8c41
SSDEEP 6144:2+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:2+U9qyFhJy56d/eoyXjn9W+
TLSH
T1AE2412E7A7548BAAE9571633A94FC31E516853612F84E453EF01AC2D3CF06E13D7B2A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp1jb75918

File Explorer

tmp1jb75918

.exe 206KB

IMPHASH e7f2d5507b09bfb1c824fe29a99d8a60
SHA256 bec98fbf9dceb054e524da716944fe66cd72f56a7a9478449472d02d07ce63de
MD5 27f90d8c65af0a37fecb226e6b4bfc69
SHA1 35338f452e4444f60196b75bbf3fbd8ac9fa4367
SHA512 9ffeff730b5684637bfef5a7ab2059ed0e9ee7abf49558b680db92ff73347e010ec044308e5779b0087024dc67e65c7c49a3ca8abd17146915caea76774f8c41
SSDEEP 6144:2+EqFQ9A9ty5bhJcrs0MurPw/c4hd/B/coyXT3nOGX6T+:2+U9qyFhJy56d/eoyXjn9W+
TLSH
T1AE2412E7A7548BAAE9571633A94FC31E516853612F84E453EF01AC2D3CF06E13D7B2A0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DosDateTimeToFileTime GetSystemDirectoryW WriteFile GetProcAddress CreateFileA GetModuleHandleA CreateDirectoryA FileTimeToSystemTime IsBadStringPtrA GetSystemDirectoryA GetTimeFormatA lstrcpyn LocalAlloc OpenWaitableTimerA EnumCalendarInfoA GetNamedPipeInfo IsValidCodePage

user32

EnumChildWindows GetSysColor DialogBoxParamA CreateMenu EnumDesktopsA GetClassNameA CharNextA ReleaseDC RegisterWindowMessageA EnumWindows InvalidateRgn SetWindowLongA ShowCursor CreateAcceleratorTableW GetCaretPos SetFocus UnregisterClassW PeekMessageW SetMenu GetMenuItemInfoA LoadImageA SendMessageW DialogBoxIndirectParamA CopyRect GetWindowRect GetScrollPos CopyImage GetSysColorBrush PostQuitMessage CheckDlgButton GetDC IsWindowEnabled FillRect CharLowerA CreateDesktopA UpdateWindow SetCapture SendDlgItemMessageW LoadBitmapW CreateWindowExW GetDlgItemTextA DefDlgProcA GetKeyboardType DefWindowProcW CloseWindow DestroyIcon SetActiveWindow CharUpperW

gdi32

GetPixelFormat GetMetaRgn GetEnhMetaFilePaletteEntries GetWorldTransform GetTextExtentExPointA GetPath GetLogColorSpaceW

advapi32

RegOpenKeyExA RegCreateKeyExW RegCloseKey RegDeleteValueW RegReplaceKeyA RegEnumValueA

shell32

StrCmpNIA StrRStrA StrStrIA

winspool.drv

EnumPrinterDataA AddPortW DocumentPropertiesW GetJobA ConfigurePortA AddMonitorA EnumPrinterKeyA EndPagePrinter DocumentPropertySheets

inetcomm

MimeOleConvertEnrichedToHTML MimeOleSMimeCapInit MimeOleGetBodyPropW MimeEditViewSource DllGetClassObject MimeOleCreateMessageParts MimeOleCreateBody HrGetDisplayNameWithSizeForFile CreateIMAPTransport HrFreeAttachData HrGetLastOpenFileDirectoryW MimeOleGetCodePageCharset MimeEditDocumentFromStream

crypt32

CryptSignCertificate CertCreateCRLContext CryptMsgOpenToDecode CertIsValidCRLForCertificate CryptGetOIDFunctionAddress CertAddEncodedCertificateToStore

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dHGmL

Size

1KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lzmjSu

Size

512B

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.YOSWO

Size

1KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sTDEgl

Size

2KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fwQO

Size

3KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kubC

Size

1024B

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.hkw

Size

1KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmp1jb75918

kernel32

user32

gdi32

advapi32

shell32

winspool.drv

inetcomm

crypt32

generic