tmpqzcjini4

General

Target
tmpqzcjini4
Size 4.1MB
Sample260602-mpt98act5q
SHA256 09fe053de3644f02cd0e7be663ceb89eea32769fb0c97bd4b0e2d10a6638257b
MD5 5b660af8e3a7456d0606f02950bc5852
SHA1 59beaf47cf28c4918245e26643ec13f2c65cae22
SHA512 486bdc01c89a5d52942fbb3ac700c0c47716d719e550ceab94c31f55c19c21c789469f87694c8ac76fefcbbd0057fdbadd5965d612fb6c7d54ef6576e824b37f
SSDEEP 98304:cjfAZNqqaqgsZHacUIrI1qIwEHQL4se08cG1SaDdk:uAZNJgwHaXL1qIKL4p0SUaa
TLSH
T1EB1633383D53F032C4E0A33405B1E6F506BBE850BFB5092BAF15B168BC67BA09667756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpqzcjini4

File Explorer

tmpqzcjini4

.exe 4.1MB

IMPHASH a679f8b83a3e7fac9ba2c7cf7ace1053
SHA256 09fe053de3644f02cd0e7be663ceb89eea32769fb0c97bd4b0e2d10a6638257b
MD5 5b660af8e3a7456d0606f02950bc5852
SHA1 59beaf47cf28c4918245e26643ec13f2c65cae22
SHA512 486bdc01c89a5d52942fbb3ac700c0c47716d719e550ceab94c31f55c19c21c789469f87694c8ac76fefcbbd0057fdbadd5965d612fb6c7d54ef6576e824b37f
SSDEEP 98304:cjfAZNqqaqgsZHacUIrI1qIwEHQL4se08cG1SaDdk:uAZNJgwHaXL1qIKL4p0SUaa
TLSH
T1EB1633383D53F032C4E0A33405B1E6F506BBE850BFB5092BAF15B168BC67BA09667756
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

6b:3e:c2:10:c0:d0:80:1d:8b:24:36:06:e9:87:1f:ff:b4:6e:5e:8e:45:24:d6:f2:aa:fe:e4:45:30:28:71:1c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

28351

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kigopugej\jacilojarihudi\kifake.pdb

kernel32

TlsGetValue InterlockedIncrement GetConsoleAliasA SetComputerNameW MoveFileWithProgressA IsBadReadPtr GetNumberFormatA WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetConsoleAliasW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW CreateMutexW LCMapStringA GetLastError GetProcAddress VirtualAlloc HeapSize GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA GetFileAttributesExW ReadConsoleInputW GetVersion IsBadStringPtrA GetSystemDefaultLangID GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection HeapFree SetFilePointer WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing