tmpz3bhrub6

General

Target
tmpz3bhrub6
Size 4.1MB
Sample260602-mxgn4abs3t
SHA256 b669f5fe8bcb43ba30ca6fb784bc14d2bbf105be9bc66850b3354fb666795dff
MD5 c01c3531c48d46b4f34c57489355af58
SHA1 ff054f0cd98d5c0d6001f68592efcc1129b52a62
SHA512 ad0b7125c5881ea96b3354dd405dec773de554b3c17a9e90c164c6de6fddeaee23c78dc69418c697b69a611e1902b2961c30cdb3e657f3d77394cb28ed71d9f7
SSDEEP 98304:+Si0A+9f9y2ymxf9j0k0KyXgWJ1pTESdcaHWw:Hrr9f9y2yUj0kpWFz2al
TLSH
T1FC1633E5BBD4C471C26825B581228BB165BA9C02C6650DCB7E78EE0FDB203F3E561F46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpz3bhrub6

File Explorer

tmpz3bhrub6

.exe 4.1MB

IMPHASH 3d675596ca8e40a75b4d427a316299a8
SHA256 b669f5fe8bcb43ba30ca6fb784bc14d2bbf105be9bc66850b3354fb666795dff
MD5 c01c3531c48d46b4f34c57489355af58
SHA1 ff054f0cd98d5c0d6001f68592efcc1129b52a62
SHA512 ad0b7125c5881ea96b3354dd405dec773de554b3c17a9e90c164c6de6fddeaee23c78dc69418c697b69a611e1902b2961c30cdb3e657f3d77394cb28ed71d9f7
SSDEEP 98304:+Si0A+9f9y2ymxf9j0k0KyXgWJ1pTESdcaHWw:Hrr9f9y2yUj0kpWFz2al
TLSH
T1FC1633E5BBD4C471C26825B581228BB165BA9C02C6650DCB7E78EE0FDB203F3E561F46
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1c:81:42:29:99:e7:3a:af:57:68:26:31:2e:2e:e9:69:c4:9f:09:53:2f:9f:a7:3f:0b:97:43:96:c6:1c:6d:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10407

Chains

May 27, 2026

POSTALCODE=10407

Minor OS version

0

Major OS version

5

Entry point

17313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\soxarepu\dusis-nukefafofamoce35-gotavubaba.pdb

kernel32

SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA MoveFileExA MapUserPhysicalPages InterlockedIncrement WaitNamedPipeA WriteConsoleInputA GetModuleHandleW GetGeoInfoW GlobalAlloc LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW ReadFile GetSystemDirectoryA GetVolumePathNameA LCMapStringA SetThreadContext GetProcAddress VirtualAlloc WriteProfileSectionA SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW AddAtomW CreateEventW OpenJobObjectW FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW LCMapStringW GetLastError GetSystemDefaultLangID HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetTextExtentExPointW

Sharing