tmp9uc3tgm7

General

Target
tmp9uc3tgm7
Size 4.0MB
Sample260602-mxtnnabs3w
SHA256 d69ce086dea6c4c420a6f1f109ea9cec7d41f8179eaa36234c3ae2df59b97d82
MD5 4946fad6a7cc59b7fe1bd13d3d1f6317
SHA1 a5ed7f1db7697945d3f00a894061d702e4b3da34
SHA512 31faeeef6c6545ac5858f2b0d6160dd93be3b5b650ed9dfe69f65d0b970eca0c8a873fd1c7ac4bb952570b340bde45ede21dc7a5437a6a5a696a92a129ecd065
SSDEEP 49152:jV9/NaRDZWpiVqg2nY9d4+g54EJoC05rLKhBsJsAbCora3+Vk9sClHo4DsRuNifY:5drgu6m+gJq5rL4sJsAbR87sC1o4o240
TLSH
T1051633202E88FF51D57467B83F2ECA61F91D79620F81C66F26D857590F83052AA3E633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp9uc3tgm7

File Explorer

tmp9uc3tgm7

.exe 4.0MB

IMPHASH 56dbf612f54c9ba62f45480e8cc28119
SHA256 d69ce086dea6c4c420a6f1f109ea9cec7d41f8179eaa36234c3ae2df59b97d82
MD5 4946fad6a7cc59b7fe1bd13d3d1f6317
SHA1 a5ed7f1db7697945d3f00a894061d702e4b3da34
SHA512 31faeeef6c6545ac5858f2b0d6160dd93be3b5b650ed9dfe69f65d0b970eca0c8a873fd1c7ac4bb952570b340bde45ede21dc7a5437a6a5a696a92a129ecd065
SSDEEP 49152:jV9/NaRDZWpiVqg2nY9d4+g54EJoC05rLKhBsJsAbCora3+Vk9sClHo4DsRuNifY:5drgu6m+gJq5rL4sJsAbR87sC1o4o240
TLSH
T1051633202E88FF51D57467B83F2ECA61F91D79620F81C66F26D857590F83052AA3E633
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

57:28:05:33:9d:52:77:a7:92:fb:7b:6d:f5:38:ed:f6:3c:a4:05:3e:a0:8b:96:2c:29:28:0b:08:9c:94:95:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

19287

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kiniwetizib\jec_31-muvege\pamihinu\wizepic\yakabijane\62.pdb

kernel32

GetConsoleAliasesA ReadFile ReadConsoleW GetVolumeInformationA GetComputerNameA LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeA FindNextChangeNotification CopyFileExA MoveFileWithProgressA VerifyVersionInfoA LocalSize FileTimeToDosDateTime DebugBreak GlobalGetAtomNameA IsBadWritePtr FindResourceW GetComputerNameExA GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthW DeleteVolumeMountPointA GetCPInfo GetQueuedCompletionStatus InterlockedPushEntrySList lstrcpynW WriteConsoleW GetBinaryTypeW WriteConsoleOutputA GetCommandLineA VerifyVersionInfoW CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetStringTypeExA OpenMutexW RtlCaptureContext InterlockedExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructA DeleteFiber InterlockedExchangeAdd EnumDateFormatsA InterlockedIncrement GetNamedPipeHandleStateW RegisterWaitForSingleObject LocalAlloc QueryMemoryResourceNotification SetLastError SetFilePointer CopyFileW LoadLibraryA RaiseException RtlUnwind GetLastError MoveFileA DeleteFileA GetStartupInfoA HeapAlloc HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection VirtualAlloc HeapReAlloc HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar LCMapStringA LCMapStringW

user32

CharUpperBuffW

advapi32

RevertToSelf

Sharing