tmpkr6ugmda

General

Target
tmpkr6ugmda
Size 4.1MB
Sample260602-mt2vvsa19y
SHA256 c97503b48934e54bd6e929256dd88c1376616ea9f3dfc8e6091f881d8885b677
MD5 1b315bf20af99eea3e44fd034bf951b0
SHA1 2b2d2c3d6afc0d40d2d1af3c921f184e8247959c
SHA512 2795fc8b50b46a7bfdcd3f95e79e12ae584e1364f01da4809aaf3c0dfb91da85f1911a6379f673692077c3c8634566e2b7687f0c5e4edd1263fb6417d60266a8
SSDEEP 98304:FZ4QMNNZE6+Tf6BUl6zXLu8glM128DOX1CNOKuEQqVchdhDzF:EX9EZ6BUcLu8glYNk8NOKvQqVClF
TLSH
T12116332AB903C460C1CCE0B00567CF65763FACB99D25CAA7BBF531C46BA33D1116669B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpkr6ugmda

File Explorer

tmpkr6ugmda

.exe 4.1MB

IMPHASH 5152ddfb3332deb6fb4acc619da01e5a
SHA256 c97503b48934e54bd6e929256dd88c1376616ea9f3dfc8e6091f881d8885b677
MD5 1b315bf20af99eea3e44fd034bf951b0
SHA1 2b2d2c3d6afc0d40d2d1af3c921f184e8247959c
SHA512 2795fc8b50b46a7bfdcd3f95e79e12ae584e1364f01da4809aaf3c0dfb91da85f1911a6379f673692077c3c8634566e2b7687f0c5e4edd1263fb6417d60266a8
SSDEEP 98304:FZ4QMNNZE6+Tf6BUl6zXLu8glM128DOX1CNOKuEQqVchdhDzF:EX9EZ6BUcLu8glYNk8NOKvQqVClF
TLSH
T12116332AB903C460C1CCE0B00567CF65763FACB99D25CAA7BBF531C46BA33D1116669B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

28:87:57:eb:f0:6c:02:23:7f:37:b3:46:e7:da:52:85:71:ca:ba:2d:09:b5:45:b2:7a:ff:47:74:1c:c4:77:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

27263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\guculubudulili20\pefuyewido zacolibah73 vaf.pdb

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WriteConsoleInputA SetComputerNameW CreateHardLinkA GetFileAttributesExA GetConsoleAliasesLengthA GetGeoInfoW WaitNamedPipeW GetSystemDirectoryW AssignProcessToJobObject SetConsoleCP GetFileAttributesA HeapCreate GetConsoleAliasW WriteConsoleW lstrlenW GetConsoleAliasExesA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateEventW AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW SetFileShortNameA ReadConsoleInputW GetVolumeNameForVolumeMountPointW LCMapStringA GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing