tmp7qeytinl

General

Target
tmp7qeytinl
Size 4.1MB
Sample260602-mrrbcact8j
SHA256 efca112a7977acac3977d7bb2173e707c7c30355cef6cc48c61304695dc547a7
MD5 f050ca002be59c66ee2c0b24fcf85ec5
SHA1 3c0ee6786147ba940b56cd59e71fe215d9cd0a32
SHA512 7de3b8b46406801efed5ba959b228d1294504276c17afac644810c40f20bf7b4592f8496ecf86b62aae2c807f8106c0a04e7bc0f831cf20e0bde5b4b469fad06
SSDEEP 98304:81tqruineCsiTplaIqodjxLmpO5JBiIfkAyz/omJVea10:EQeCsCpBqcxapO5JBPkRTomJov
TLSH
T1031633043E56E130C9705D77ACEEEBA54E6FF2315972589772888F5A2F3730062B439A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp7qeytinl

File Explorer

tmp7qeytinl

.exe 4.1MB

IMPHASH d30642589c5036fb64633e317891955b
SHA256 efca112a7977acac3977d7bb2173e707c7c30355cef6cc48c61304695dc547a7
MD5 f050ca002be59c66ee2c0b24fcf85ec5
SHA1 3c0ee6786147ba940b56cd59e71fe215d9cd0a32
SHA512 7de3b8b46406801efed5ba959b228d1294504276c17afac644810c40f20bf7b4592f8496ecf86b62aae2c807f8106c0a04e7bc0f831cf20e0bde5b4b469fad06
SSDEEP 98304:81tqruineCsiTplaIqodjxLmpO5JBiIfkAyz/omJVea10:EQeCsCpBqcxapO5JBPkRTomJov
TLSH
T1031633043E56E130C9705D77ACEEEBA54E6FF2315972589772888F5A2F3730062B439A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

58:e0:7d:51:8a:54:78:00:97:92:51:88:a1:07:3d:1f:9f:f2:85:5b:d3:e4:ea:6e:02:47:6e:19:1f:fd:8b:b5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

38019

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gukuw\rupowinav\yojogev-100\wagoku jecabuvir\duredabum\fivulan.pdb

kernel32

GetModuleHandleA FoldStringA InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputW WaitNamedPipeW CommConfigDialogW GetSystemTimeAdjustment FindNextFileA EnumResourceTypesW GetModuleFileNameW UpdateResourceA LoadLibraryW DeleteFileA CopyFileW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameA GetPrivateProfileStringA PeekConsoleInputA GlobalGetAtomNameW GetProcAddress ReleaseActCtx GetConsoleAliasW FindFirstChangeNotificationW WritePrivateProfileStringA EnumResourceNamesW GetFileType CommConfigDialogA lstrcpynA AddAtomA AllocConsole GetLongPathNameA GetSystemDefaultLCID GetSystemDefaultLangID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameW GetVolumeNameForVolumeMountPointA GetFileSize GetFileAttributesExW SetComputerNameW GetFileAttributesA ReadConsoleA GetVolumePathNameA FindNextFileW OpenJobObjectA InitializeCriticalSection GlobalWire GetComputerNameW GetVersionExA LoadLibraryA HeapAlloc MultiByteToWideChar RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetStartupInfoA DeleteCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile HeapSize FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRegisterMallocSpy

msimg32

TransparentBlt

Sharing