tmp32w7be4g

General

Target
tmp32w7be4g
Size 4.1MB
Sample260602-msa1ract9m
SHA256 b6f82f21dc5fef0074dbdb513d971c113efaecc6e33d8e9ea2e89530cbd42db4
MD5 dbddd4b42be8a732a86a14856415a6f9
SHA1 84174fd80ac34bddc8f8dd481a78f6652c537d43
SHA512 1c613e3d6dbe7698366238e3bef8364e1339749510f80b6793f57b6cc61d0f1fae2ca1fc8c2f9123b5e9cb6fc78e1765af41e0a1e48f9a3b7146d83bbd5658c1
SSDEEP 98304:VKIvtHE/oCWNG9VQm0Z+S+sipHM/zLLSGe4hE3vHUX+7G:EaaobwQm0Z+S+vMTxe4hE8gG
TLSH
T1F116336578D2C036C09326B1CE6096E33F6678A174A409BA3388FFF43E957A35734B56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp32w7be4g

File Explorer

tmp32w7be4g

.exe 4.1MB

IMPHASH 5010870508222987049c95041bd87cda
SHA256 b6f82f21dc5fef0074dbdb513d971c113efaecc6e33d8e9ea2e89530cbd42db4
MD5 dbddd4b42be8a732a86a14856415a6f9
SHA1 84174fd80ac34bddc8f8dd481a78f6652c537d43
SHA512 1c613e3d6dbe7698366238e3bef8364e1339749510f80b6793f57b6cc61d0f1fae2ca1fc8c2f9123b5e9cb6fc78e1765af41e0a1e48f9a3b7146d83bbd5658c1
SSDEEP 98304:VKIvtHE/oCWNG9VQm0Z+S+sipHM/zLLSGe4hE3vHUX+7G:EaaobwQm0Z+S+vMTxe4hE8gG
TLSH
T1F116336578D2C036C09326B1CE6096E33F6678A174A409BA3388FFF43E957A35734B56
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

06:87:4a:ea:d4:23:be:69:97:2c:82:2f:40:4f:28:af:8f:20:39:46:db:02:a5:ba:7e:fe:36:ac:26:0d:de:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

29312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\juxi\vijapeyifilami\fawak_xefo.pdb

kernel32

TlsGetValue SetEndOfFile InterlockedIncrement GetConsoleAliasA IsBadReadPtr ConvertFiberToThread WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW IsBadStringPtrA GetLastError CreateMutexW VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType AddAtomW FoldStringW FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData SetFileAttributesW LCMapStringW GetProcAddress GetSystemDefaultLangID GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing