tmpwrhbhua6

Sharing

Copy URL Twitter E-mail

General

Target
tmpwrhbhua6
Size 304KB
Sample260602-gh2g3aev2v
SHA256 165a19de67d02f7a3df7c18d31ff4bc870a9850b1459975cec6f514bb8828a7e
MD5 940e599a80d7e5d801a0c7a6fa987912
SHA1 21099e544d303ec71799c37807662e1c6f77b367
SHA512 cf7f1825aa6d56a31a680afd4badb4b9c44a6e4ddd49dd653da0704f57a1769836b388a3474572ea50c1fb7783a5cdb713782c285cf878b83d755b521f381d33
SSDEEP 6144:bUQQ2o6sd0ruwTm91y5a39OlxrBKJBIKbDc6pAPfhe7a3eM9J6U:b025sq69H9yxrBMBdFpAPfcarQ
TLSH
T173640213EB89053BDC0A9731C4AF611F88E95C4253A110C73E986BEDCE72791573AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpwrhbhua6

File Explorer

tmpwrhbhua6

.exe 304KB

IMPHASH c938fce84fbb5db6d3530fbcb7c549e6
SHA256 165a19de67d02f7a3df7c18d31ff4bc870a9850b1459975cec6f514bb8828a7e
MD5 940e599a80d7e5d801a0c7a6fa987912
SHA1 21099e544d303ec71799c37807662e1c6f77b367
SHA512 cf7f1825aa6d56a31a680afd4badb4b9c44a6e4ddd49dd653da0704f57a1769836b388a3474572ea50c1fb7783a5cdb713782c285cf878b83d755b521f381d33
SSDEEP 6144:bUQQ2o6sd0ruwTm91y5a39OlxrBKJBIKbDc6pAPfhe7a3eM9J6U:b025sq69H9yxrBMBdFpAPfcarQ
TLSH
T173640213EB89053BDC0A9731C4AF611F88E95C4253A110C73E986BEDCE72791573AF21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18117

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

SetTextColor GetDeviceCaps BitBlt CreateSolidBrush CreateCompatibleDC DeleteObject CreateCompatibleBitmap GetTextMetricsW GetObjectW DeleteDC CopyMetaFileW ExtTextOutW CreateBitmap SelectObject GetTextExtentPointW CreateFontIndirectW GetTextExtentPoint32W GetStockObject SetBkColor

oleaut32

LoadTypeLi SafeArrayGetLBound SafeArrayUnlock RegisterTypeLi SetErrorInfo SafeArrayGetUBound VarBstrCmp VariantChangeTypeEx SafeArrayDestroy VariantChangeType SysStringByteLen SysAllocString SysAllocStringByteLen LoadTypeLibEx VariantCopyInd SafeArrayUnaccessData VarBstrCat SysFreeString SafeArrayLock VarUI4FromStr VariantClear UnRegisterTypeLi GetErrorInfo VariantInit SafeArrayCreate LoadRegTypeLi SysStringLen SafeArrayRedim SafeArrayGetVartype VariantCopy SysAllocStringLen OleCreateFontIndirect SafeArrayAccessData VarBstrFromDate

kernel32

FlushInstructionCache CreateFileMappingA HeapDestroy GlobalUnlock LoadResource WideCharToMultiByte VirtualAlloc GetLocalTime LeaveCriticalSection CreateDirectoryW FlushFileBuffers GetFileTime UnhandledExceptionFilter SetFileAttributesW GetSystemTimeAsFileTime FormatMessageW HeapAlloc GetModuleHandleW EnterCriticalSection HeapReAlloc InterlockedPushEntrySList CompareStringW lstrcmpW GlobalSize GetACP SetLastError CopyFileW FreeLibrary TlsAlloc GetTempFileNameW FindNextFileW FindResourceExW OpenFile IsDebuggerPresent TlsGetValue DeleteFileW WriteFile InitializeCriticalSectionAndSpinCount MoveFileW LocalFree MulDiv IsDBCSLeadByte TlsSetValue InterlockedPopEntrySList lstrlenW GetUserDefaultLCID CreateFileA GlobalFree CreateFileW ReadFile lstrcmpiW LockResource IsValidCodePage IsProcessorFeaturePresent GlobalReAlloc GetFileType GetFileSize GetFullPathNameW RemoveDirectoryW SetFilePointer GetProcessHeap SizeofResource DeleteCriticalSection GlobalLock HeapFree SetFileTime LoadLibraryExW TlsFree GetCurrentThreadId GlobalAlloc HeapSize SetEndOfFile FindResourceW lstrlenA CloseHandle GetComputerNameW FileTimeToSystemTime UnmapViewOfFile FindClose MapViewOfFile SetUnhandledExceptionFilter RaiseException FindFirstFileW VirtualFree lstrcmpA VirtualAllocEx

advapi32

CryptDestroyKey RegOpenKeyExW RegCreateKeyExW CryptReleaseContext RegEnumKeyExW RegDeleteKeyW RegEnumValueW RegSetValueExW RegQueryInfoKeyW RegDeleteValueW RegCloseKey RegQueryValueExW

ole32

GetHGlobalFromStream OleGetClipboard OleUninitialize CoTaskMemFree CreateDataAdviseHolder CoGetMalloc OleDuplicateData StringFromCLSID CLSIDFromProgID ReleaseStgMedium CreateStreamOnHGlobal CLSIDFromString OleInitialize OleSetClipboard StringFromGUID2 CoTaskMemAlloc ReadClassStm CoGetClassObject CoCreateInstance OleLockRunning CoTaskMemRealloc

shell32

ShellExecuteExW DragQueryFileW

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_GetImageCount ImageList_Create ImageList_ReplaceIcon CreateStatusWindow InitializeFlatSB FlatSB_SetScrollInfo ImageList_DrawEx ImageList_LoadImageA ImageList_Duplicate CreateMappedBitmap

crypt32

CryptUnprotectData CryptProtectData

user32

GetFocus RedrawWindow DialogBoxIndirectParamW ClientToScreen SendDlgItemMessageW GetWindowLongW GetClassInfoExW MoveWindow SetFocus CharNextW GetDlgItemTextW CreateDialogParamW CharLowerBuffW DestroyAcceleratorTable CallWindowProcW InvalidateRgn MonitorFromWindow GetParent LoadStringW GetActiveWindow RegisterClipboardFormatW DestroyWindow LoadBitmapW PostMessageW GetWindowTextLengthW GetDesktopWindow DrawFocusRect MapWindowPoints EnableWindow GetWindow LoadCursorW DefWindowProcW IsWindow ShowWindow CreateWindowExW GetCursorPos GetClassNameW SetCapture GetSysColor InvalidateRect EndPaint FillRect SetWindowLongW TranslateMessage GetDialogBaseUnits MessageBoxW GetDlgItemInt PeekMessageW SetDlgItemInt LoadIconW RegisterWindowMessageW UnregisterClassA GetMonitorInfoW CheckDlgButton GetClientRect GetNextDlgTabItem SetCursor IsDialogMessageW SetWindowPos IsWindowEnabled GetKeyState EmptyClipboard SendMessageW DialogBoxParamW BeginPaint GetDlgItem OpenClipboard SetWindowTextW IsChild ReleaseCapture IsClipboardFormatAvailable IsCharAlphaNumericW CreateAcceleratorTableW GetDC IsDlgButtonChecked DrawTextExW CharNextA RegisterClassExW EndDialog ReleaseDC SetDlgItemTextW GetWindowRect LoadStringA DispatchMessageW GetWindowTextW CreateDialogIndirectParamW LoadImageW ScreenToClient

kbdhu1

KbdLayerDescriptor