tmphjwjlhn2

General

Target
tmphjwjlhn2
Size 421KB
Sample260602-hcksssft3v
SHA256 8aa25ae29c5eeb062b5ae8cf48b5f1381d73298f61ebea9563bcb4f253446065
MD5 10dd1255825cbde60c665539380e5691
SHA1 425d9f9cb80c6f636c0d762d69bdb9329b0d8d75
SHA512 6b1fe481d69799caa6265a2aaccb1c3ace9b17776b93aec5df3d1f9b5e71c56401fef9df562f1f419b40412ac136e5ce8b08acd7897555d7711a6156dd18837c
SSDEEP 6144:tZXN7S1y8WA3gha780p2F2V6voOy5Gn7n0O8N5WYeXmseY1rmWd2KWJ:tjS1yhA30a78rQqIN5te20qWd2KWJ
TLSH
T1B794AE0076A0C5AAE4B86877DE14D9FC85593C64CF70A8973AD0BF1F7F703E19626A21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmphjwjlhn2

File Explorer

tmphjwjlhn2

.dll 421KB

IMPHASH 5cb6c9b4e8a3c623ad37024a14b16a33
SHA256 8aa25ae29c5eeb062b5ae8cf48b5f1381d73298f61ebea9563bcb4f253446065
MD5 10dd1255825cbde60c665539380e5691
SHA1 425d9f9cb80c6f636c0d762d69bdb9329b0d8d75
SHA512 6b1fe481d69799caa6265a2aaccb1c3ace9b17776b93aec5df3d1f9b5e71c56401fef9df562f1f419b40412ac136e5ce8b08acd7897555d7711a6156dd18837c
SSDEEP 6144:tZXN7S1y8WA3gha780p2F2V6voOy5Gn7n0O8N5WYeXmseY1rmWd2KWJ:tjS1yhA30a78rQqIN5te20qWd2KWJ
TLSH
T1B794AE0076A0C5AAE4B86877DE14D9FC85593C64CF70A8973AD0BF1F7F703E19626A21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5555

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\touch\Drop\leave\Share\head\Box\sailprepare.pdb

kernel32

Sleep GetTempPathA GetSystemDirectoryA TlsAlloc GetCurrentDirectoryA VirtualProtectEx RemoveDirectoryA GetProcessHeap FindFirstChangeNotificationA HeapAlloc RaiseException DecodePointer WriteConsoleW FlushFileBuffers HeapReAlloc HeapSize GetStringTypeW GetCommandLineW GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage WideCharToMultiByte GetStdHandle SetFilePointerEx ReadConsoleW ReadFile SetEndOfFile SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetLastError GetModuleFileNameW InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsGetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateFileW GetFileType CloseHandle ExitProcess GetModuleHandleExW HeapFree WriteFile GetConsoleCP GetConsoleMode MultiByteToWideChar LCMapStringW TlsSetValue

setupapi

SetupGetFieldCount SetupGetStringFieldA SetupQueryInfVersionInformationA SetupGetSourceInfoA SetupAddToSourceListA SetupIterateCabinetA SetupGetTargetPathA SetupTermDefaultQueueCallback SetupGetIntField SetupCopyOEMInfA SetupQueueRenameA SetupQueueDefaultCopyA SetupFreeSourceListA SetupRemoveFromSourceListA SetupSetSourceListA SetupQuerySpaceRequiredOnDriveA SetupQueueCopyA SetupGetLineCountA SetupPromptReboot SetupSetPlatformPathOverrideA SetupDefaultQueueCallbackA SetupGetLineByIndexA SetupOpenMasterInf SetupGetLineTextA SetupInitDefaultQueueCallbackEx SetupQuerySourceListA SetupCancelTemporarySourceList

advapi32

SystemFunction036

Sharing