tmpsvnuz3q6

General

Target
tmpsvnuz3q6
Size 4.2MB
Sample260602-msjynact9q
SHA256 36ae0143291eb281d88dadee0ad224066908cd6828b58bf54ce260cd8c9b20a8
MD5 df8c8d0460353153fd51cdef5db34782
SHA1 c66d2f314dda2ab72c86c23f8fbe2d721d9c8e4a
SHA512 53904370d0a3daa5283f00fa983ef89bd83c59c37855b4cc56a87cd90020775d4ff3b3aaaa91c1f428f9ee06cc9dbe6bf21f17d74f0ad0c99f5ebd6f7aa98e87
SSDEEP 98304:0AuZOVFnQMpZiDmjyTAQ8zRELdQ3tFD0vRrojQ/:7uEVFnQkZF5zR73tFD0vEQ/
TLSH
T1591633F0E014DA33C0D6E135958DB760AC7F9923D8AACE4633B66B2E5E253D2D764312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpsvnuz3q6

File Explorer

tmpsvnuz3q6

.exe 4.2MB

IMPHASH 86d8f2a7100566fa055c9f5f14f6c0ca
SHA256 36ae0143291eb281d88dadee0ad224066908cd6828b58bf54ce260cd8c9b20a8
MD5 df8c8d0460353153fd51cdef5db34782
SHA1 c66d2f314dda2ab72c86c23f8fbe2d721d9c8e4a
SHA512 53904370d0a3daa5283f00fa983ef89bd83c59c37855b4cc56a87cd90020775d4ff3b3aaaa91c1f428f9ee06cc9dbe6bf21f17d74f0ad0c99f5ebd6f7aa98e87
SSDEEP 98304:0AuZOVFnQMpZiDmjyTAQ8zRELdQ3tFD0vRrojQ/:7uEVFnQkZF5zR73tFD0vEQ/
TLSH
T1591633F0E014DA33C0D6E135958DB760AC7F9923D8AACE4633B66B2E5E253D2D764312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

62:65:f2:6c:22:84:98:7f:b6:0a:42:00:90:cc:94:16:43:21:d6:4a:13:da:93:97:b9:9b:2e:a1:c5:66:19:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

19777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zex18_ramaxixe.pdb

kernel32

GetSystemDefaultLangID GetThreadContext CreateMutexW WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA InterlockedIncrement GetFileAttributesExA GetModuleHandleW GetGeoInfoW WaitNamedPipeW GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW ReadFile GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc WriteProfileSectionA FreeUserPhysicalPages SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

Sharing