tmpuyjz5zq_

Sharing

Copy URL Twitter E-mail

General

Target
tmpuyjz5zq_
Size 275KB
Sample260602-f24absd16w
SHA256 fbce6880c104f8c0a8ed6c6f7a0546a6f546d337a8355eb32db7e92cb484244b
MD5 bd1bc46b378e7d9c4a3065f13e2ffd63
SHA1 319a5478f78cdc9fc347192d2db1e298c9562603
SHA512 9e5e94a68e11526c1c8c76a1671a8326dc77ab315f25555cb0cacb82d6fcd8e6d11c1dc548a46b7e6b1ced0c4978a890546edeb13fb01d975ed722ce22a35de2
SSDEEP 6144:g2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:g2JUcX8LvVQY8kk2EO+d
TLSH
T12C54128F9876F4E5DDEBCEB41EF2D943E6AB4031638685DA51A0B550A323B6250FCF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpuyjz5zq_

File Explorer

tmpuyjz5zq_

.exe 275KB

IMPHASH 2c59df6083165220959cf80ab831c667
SHA256 fbce6880c104f8c0a8ed6c6f7a0546a6f546d337a8355eb32db7e92cb484244b
MD5 bd1bc46b378e7d9c4a3065f13e2ffd63
SHA1 319a5478f78cdc9fc347192d2db1e298c9562603
SHA512 9e5e94a68e11526c1c8c76a1671a8326dc77ab315f25555cb0cacb82d6fcd8e6d11c1dc548a46b7e6b1ced0c4978a890546edeb13fb01d975ed722ce22a35de2
SSDEEP 6144:g2J9n/ekxcnYvkGc9plVQYsvkk2EOqpJjSsTS:g2JUcX8LvVQY8kk2EO+d
TLSH
T12C54128F9876F4E5DDEBCEB41EF2D943E6AB4031638685DA51A0B550A323B6250FCF01
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18391

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

wsprintfA CharPrevExA CharUpperBuffW CharNextExA

advapi32

AddAccessDeniedAce SetThreadToken AddAccessAllowedAce DeregisterEventSource ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW RegisterTraceGuidsA RegCreateKeyExW FreeSid RegQueryValueExW InitializeSecurityDescriptor GetLengthSid OpenSCManagerW OpenServiceW SetSecurityDescriptorDacl RegisterServiceCtrlHandlerExW GetTraceEnableFlags DuplicateToken LookupAccountSidA GetTraceEnableLevel InitializeAcl RegSetValueExW ConvertStringSecurityDescriptorToSecurityDescriptorA UnregisterTraceGuids GetTokenInformation DuplicateTokenEx RegisterEventSourceW StartServiceCtrlDispatcherW GetTraceLoggerHandle TraceMessage RegOpenKeyExW RegCloseKey CloseServiceHandle AllocateAndInitializeSid SetServiceStatus

rpcrt4

RpcServerUseProtseqEpA NdrServerCall2 RpcMgmtStopServerListening RpcServerListen RpcServerUnregisterIf RpcServerRegisterAuthInfoA RpcServerRegisterIf

kernel32

CreateMutexW UnregisterWaitEx VirtualAlloc HeapFree GetVolumeInformationW QueryPerformanceFrequency LCMapStringA CreateSemaphoreW HeapDestroy RaiseException GetConsoleOutputCP GlobalFree ReleaseSemaphore SetHandleCount FreeEnvironmentStringsA CreateEventW ResetEvent SystemTimeToFileTime HeapAlloc QueueUserWorkItem GetVolumePathNamesForVolumeNameW DeleteTimerQueueTimer CreateFileMappingA GetProcessHeap UnlockFile GetCurrentThreadId CreateMutexA RegisterWaitForSingleObject CreateFileMappingW UnhandledExceptionFilter TlsFree IsValidLocale GetOEMCP WideCharToMultiByte MapViewOfFile GetUserDefaultLCID DeleteCriticalSection GetTempFileNameW CreateEventA HeapReAlloc OpenMutexA IsValidCodePage GetCommandLineA GetPriorityClass SetEndOfFile CreateFileW OpenProcess CreateTimerQueueTimer TlsAlloc GetSystemTime FreeEnvironmentStringsW UnregisterWait TlsGetValue GetConsoleCP EnumSystemLocalesA CreateIoCompletionPort MoveFileW UnmapViewOfFile DeleteTimerQueueEx GetFileType GetThreadPriority GetShortPathNameA ExpandEnvironmentStringsW GetDriveTypeW LoadLibraryExA GetStdHandle FlushFileBuffers GetFileSizeEx SetThreadPriority GetSystemTimeAsFileTime CreateProcessW CreateFileA FreeLibrary GlobalMemoryStatusEx DeleteFileW LCMapStringW GetComputerNameW WriteConsoleA GetConsoleMode SetFilePointer EnterCriticalSection CloseHandle ReleaseMutex LeaveCriticalSection IsDebuggerPresent GetFileSize HeapSize VirtualFree LocalFree WaitForMultipleObjects CompareStringW CopyFileW LockFileEx GetModuleHandleA CreateTimerQueue GlobalAlloc RtlUnwind GetComputerNameA SetFilePointerEx CreateDirectoryW WaitForSingleObject GetACP SetLastError CreateThread SetStdHandle TlsSetValue OpenEventA GetLocalTime WriteConsoleW SetUnhandledExceptionFilter GetQueuedCompletionStatus GetSystemInfo WriteFile SetPriorityClass PostQueuedCompletionStatus SetErrorMode ReadFile CompareStringA GetStartupInfoW VirtualAllocEx

rtm

RtmCloseEnumerationHandle RtmGetFirstRoute RtmGetListEnumRoutes RtmReleaseNextHopInfo MgmGetMfe RtmUpdateAndUnlockRoute InsertIntoTable RtmReleaseDests RtmReadInstanceConfig DumpTable MgmReleaseInterfaceOwnership MgmGetNextMfe RtmReleaseRoutes

qedit

DllCanUnloadNow DllGetClassObject