Overview

overview

10

Static

static

3

tmp00tbd_bf.exe

windows10-ltsc_2021-x64

10

tmp00tbd_bf.exe

windows10-2004-x64

10

tmp00tbd_bf.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp00tbd_bf
  • Size 4.0MB
  • Sample260602-mrhdfaa17y
  • SHA256 a3a7ebd3ea3953516edd3440f6abd0f29d3e4d93f6db21f07486ade3d5ea5b72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmp00tbd_bf
    .exe 4.0MB

tmp00tbd_bf

  • IMPHASH ee783376aeb5a6ccd1e2676f1a5f0e82
  • SHA256 a3a7ebd3ea3953516edd3440f6abd0f29d3e4d93f6db21f07486ade3d5ea5b72
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
80:4c:06:a6:42:a8:ff:94:ef:00:04:00:23:c6:cc:87:03:a3:e1:14:fe:0a:50:11:65:7f:dd:c1:84:de:1c:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
21317
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\dag\vomokufo\68-wuzevodowaf.pdb