tmpx2uqsn61

General

Target
tmpx2uqsn61
Size 4.2MB
Sample260602-m2fmlabs8x
SHA256 560b98b3550a5c840a2227c73d2924b0abc63000d3f5d3f1962fd80b4536ff4b
MD5 cdb9fe2839593d4b30c9aba12a895af7
SHA1 8b4dc3dc12578eef1c489978b841cba94666a5a6
SHA512 699b785b4f1c19cfd68471d3a2adcbba37f19e01348e5d81bce56784c4224fa4d614e6976dcb645e1b2686b1a1146c11377a9c8cf59d44de707337db67baadea
SSDEEP 98304:h8faBUpm4C7DqNk9om0g1TyVg9E2WVtGeqSNVT4gCsiIsFGHyN:eSug40bV0cTC4E5oCNSImN
TLSH
T13416330A7610DDB7D6460D34580AEFA04ABFF864D7A406A3F3A957790EB7354129B30F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpx2uqsn61

File Explorer

tmpx2uqsn61

.exe 4.2MB

IMPHASH f86972b0b9fc89569bd497bebfd6a497
SHA256 560b98b3550a5c840a2227c73d2924b0abc63000d3f5d3f1962fd80b4536ff4b
MD5 cdb9fe2839593d4b30c9aba12a895af7
SHA1 8b4dc3dc12578eef1c489978b841cba94666a5a6
SHA512 699b785b4f1c19cfd68471d3a2adcbba37f19e01348e5d81bce56784c4224fa4d614e6976dcb645e1b2686b1a1146c11377a9c8cf59d44de707337db67baadea
SSDEEP 98304:h8faBUpm4C7DqNk9om0g1TyVg9E2WVtGeqSNVT4gCsiIsFGHyN:eSug40bV0cTC4E5oCNSImN
TLSH
T13416330A7610DDB7D6460D34580AEFA04ABFF864D7A406A3F3A957790EB7354129B30F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

85:12:08:cc:c8:5b:de:44:87:2f:3f:1f:40:9e:02:d8:63:ff:1f:6a:b6:65:49:10:54:79:82:0b:1f:f4:70:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

30336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sifudufolan_narumehuviv.pdb

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement HeapFree SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW LCMapStringA GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing