Overview

overview

10

Static

static

3

tmpso5qf0to.exe

windows10-ltsc_2021-x64

10

tmpso5qf0to.exe

windows10-2004-x64

10

tmpso5qf0to.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpso5qf0to
  • Size 4.1MB
  • Sample260602-m4dwsabt21
  • SHA256 f7d249a880fd2f9a65923a44ff0edb0ed6ba54f2fe59dcf27a0d0e4e1ba02876
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmpso5qf0to
    .exe 4.1MB

tmpso5qf0to

  • IMPHASH ca7da7b616d2b4d3a277aecb32a135a5
  • SHA256 f7d249a880fd2f9a65923a44ff0edb0ed6ba54f2fe59dcf27a0d0e4e1ba02876
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
e3:d5:c9:ad:61:1b:2f:6b:4d:b8:e8:4a:21:75:0a:47:1b:43:d5:0f:a9:79:2b:a4:c1:06:cb:2d:b9:42:ce:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
37990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\jesepicedim_gululeyiceto\xerip_cuwukanebedik_pozinoxopufobo\jo.pdb