tmp8ev7fugl

Sharing

Copy URL Twitter E-mail

General

Target
tmp8ev7fugl
Size 310KB
Sample260602-ghblmsfx7n
SHA256 1acea043d680237fa2b8d190424637c902a132e979d951371dc1eaa9e46f541f
MD5 966a79bfb420395cc2f8ed838df3f88e
SHA1 1e9bf48740554151e8d1d41a7852a7297fdb60fb
SHA512 e746f141735c164e266c80dd10646c5c7412f83f3283b058ecb4fb69e7e94853fe6c12208bb6a04aa54ffc8bc127a913d0943dad45c4a70852e773c13b16e6a4
SSDEEP 6144:2oNxye8AIxNxeNDVOA3Sb2wJJFKjvXYrPwvQnsvEDYTqX6kGCpeTy:2gQetQYVOA3SngzYPwvrE8s6cMG
TLSH
T13D640263FE5D5C45F3290AF689BB4E0B534E61571232032A2825F71E5AC33F29AE1F91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp8ev7fugl

File Explorer

tmp8ev7fugl

.exe 310KB

IMPHASH 65de36af80622a708c923c2c1a1ad97b
SHA256 1acea043d680237fa2b8d190424637c902a132e979d951371dc1eaa9e46f541f
MD5 966a79bfb420395cc2f8ed838df3f88e
SHA1 1e9bf48740554151e8d1d41a7852a7297fdb60fb
SHA512 e746f141735c164e266c80dd10646c5c7412f83f3283b058ecb4fb69e7e94853fe6c12208bb6a04aa54ffc8bc127a913d0943dad45c4a70852e773c13b16e6a4
SSDEEP 6144:2oNxye8AIxNxeNDVOA3Sb2wJJFKjvXYrPwvQnsvEDYTqX6kGCpeTy:2gQetQYVOA3SngzYPwvrE8s6cMG
TLSH
T13D640263FE5D5C45F3290AF689BB4E0B534E61571232032A2825F71E5AC33F29AE1F91
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupIterateCabinetW

comdlg32

GetOpenFileNameW

shlwapi

PathRemoveFileSpecW PathCombineW

msi

ord204 ord111 ord113 ord70 ord160 ord8 ord159 ord32 ord45 ord120 ord92 ord205

gdi32

CreateFontIndirectW DeleteObject GetDeviceCaps GetLayout

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

shell32

SHGetFolderPathW CommandLineToArgvW

ole32

StringFromCLSID CLSIDFromString CoTaskMemAlloc CoTaskMemFree CoRevokeClassObject CoTaskMemRealloc StringFromGUID2 CLSIDFromProgID CoCreateInstance OleRun CoRegisterClassObject CoUninitialize CoInitialize CoLoadLibrary CoInitializeEx

user32

MonitorFromWindow SendMessageW GetMessageA SetWindowPlacement ReleaseDC ReleaseCapture TranslateAcceleratorW CharPrevW GetWindowPlacement CallWindowProcW GetClientRect UnregisterClassA GetWindowLongW EndPaint IsWindowUnicode PostMessageW GetDlgItemTextW RegisterClassExW GetSystemMetrics GetDesktopWindow PeekMessageW SetWindowLongW IsWindow CreateDialogParamW GetWindowTextLengthW BeginPaint GetSystemMenu SetForegroundWindow GetParent DispatchMessageA DefWindowProcW GetFocus GetClassInfoExW SetCursor DispatchMessageW SetWindowPos DialogBoxParamW MsgWaitForMultipleObjectsEx SetCapture SetWindowTextW MsgWaitForMultipleObjects SetDlgItemTextW LoadStringW EnableWindow SetFocus DestroyWindow LoadIconW GetWindowRect PostThreadMessageW GetDC GetDlgItem SystemParametersInfoW LoadCursorW GetWindowTextW MessageBoxW GetMessageW CreateWindowExW ShowWindow MapWindowPoints EnableMenuItem CharNextW EndDialog GetWindow GetMonitorInfoW TranslateMessage SetMenu DestroyCursor RegisterClassW GetActiveWindow LoadMenuIndirectW CreateDialogParamA LoadIconA GetSysColorBrush GetCaretPos OpenClipboard SetCursorPos CreateAcceleratorTableW TrackPopupMenuEx GetMenuInfo CreateDialogIndirectParamW TrackPopupMenu GetClassInfoA GetMenuState CopyRect InvalidateRect

oleaut32

CreateErrorInfo SetErrorInfo VariantClear SafeArrayGetDim SysFreeString SysAllocString VarBstrCmp GetErrorInfo LoadTypeLi SafeArrayDestroy SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElement VariantInit LoadRegTypeLi SysStringLen VarUI4FromStr SysAllocStringLen

kernel32

WriteFile GetACP TlsFree Process32NextW FindFirstFileExW SetHandleCount FindClose FindResourceW lstrlenA GetModuleHandleA SetUnhandledExceptionFilter GetFileInformationByHandle IsValidLocale FileTimeToSystemTime GetSystemDefaultLCID LeaveCriticalSection CreateThread SetErrorMode InitializeCriticalSectionAndSpinCount VirtualAlloc FreeEnvironmentStringsW HeapReAlloc WaitForSingleObject GetTempPathW IsProcessorFeaturePresent SizeofResource GetConsoleCP GetOEMCP lstrcmpiW CreateDirectoryW LocalAlloc DuplicateHandle EnumUILanguagesW IsDebuggerPresent GetWindowsDirectoryW RtlUnwind HeapAlloc TlsGetValue GetCommandLineA GetFileType InterlockedPopEntrySList RaiseException GetTempFileNameW EnumSystemLocalesA GetCommandLineW CreateToolhelp32Snapshot EnterCriticalSection WriteConsoleW VirtualFree LoadResource CreateMutexW GetStdHandle GetDriveTypeW FlushInstructionCache GetTimeZoneInformation SetLastError FlushFileBuffers CreateEventW DeleteFileW FreeLibrary OutputDebugStringW ReadFile CloseHandle SetEndOfFile lstrcmpA GetProcessHeap GetSystemDirectoryW TlsAlloc GetShortPathNameW GetLocalTime CreateFileMappingW GetPrivateProfileStringW IsValidCodePage FindFirstFileW FindResourceExW WideCharToMultiByte MulDiv LocalFree GetSystemTimeAsFileTime RemoveDirectoryW GetCurrentDirectoryW LockResource SetStdHandle IsWow64Process SetFileAttributesW GetUserDefaultLCID TlsSetValue FindNextFileW GetSystemInfo MapViewOfFile LCMapStringW FormatMessageW HeapSize lstrlenW ResetEvent GetCurrentThreadId UnmapViewOfFile SetEnvironmentVariableA PeekNamedPipe SetFilePointer InterlockedPushEntrySList DeleteCriticalSection HeapDestroy GetExitCodeThread ReleaseMutex UnhandledExceptionFilter HeapFree CreateFileW GetPrivateProfileSectionW CompareStringW CreateProcessW GetFullPathNameW GetConsoleMode GetModuleHandleW Process32FirstW LoadLibraryExW

docprop

DllGetClassObject