tmp0ch4orxg

General

Target
tmp0ch4orxg
Size 4.1MB
Sample260602-mys4hsbs5w
SHA256 fabb2ded4acb7bbeb55df1c757087c996079246604f38611dbf4b1ba328196ea
MD5 217883921847c6d12f29a9d8c2c4073d
SHA1 9fbd5c0789d84a86d54c2b0a1c842c58eeec1f6e
SHA512 f13939ebe309ee9bd6e921ba9e14b23aa330e782a517f2e5e66bb6efb7426e64c68c6af9bfea908cfe9552d8693ed1828b09b569b96bc702fe067adf68874ff6
SSDEEP 49152:6SSAc5+EBBpy3tKvHKCqh0p4tK/fsx1Wu3QVj7sY/nbtohfDodcPRsZUMUA4oEMs:S/mtKvHE85I1Wugn3zORsUALFXEHp
TLSH
T1A01633373384A176C4322171EC01FBD65B7EB67838766587FA86123F9B321E287B1652
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp0ch4orxg

File Explorer

tmp0ch4orxg

.exe 4.1MB

IMPHASH 92fd52968f8d7a0a9591a0e6eb7642f5
SHA256 fabb2ded4acb7bbeb55df1c757087c996079246604f38611dbf4b1ba328196ea
MD5 217883921847c6d12f29a9d8c2c4073d
SHA1 9fbd5c0789d84a86d54c2b0a1c842c58eeec1f6e
SHA512 f13939ebe309ee9bd6e921ba9e14b23aa330e782a517f2e5e66bb6efb7426e64c68c6af9bfea908cfe9552d8693ed1828b09b569b96bc702fe067adf68874ff6
SSDEEP 49152:6SSAc5+EBBpy3tKvHKCqh0p4tK/fsx1Wu3QVj7sY/nbtohfDodcPRsZUMUA4oEMs:S/mtKvHE85I1Wugn3zORsUALFXEHp
TLSH
T1A01633373384A176C4322171EC01FBD65B7EB67838766587FA86123F9B321E287B1652
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

10:e6:bc:03:dc:8b:45:4c:6e:25:80:f2:89:36:be:c7:46:04:6c:12:79:21:2c:3d:29:12:1e:77:77:4d:3b:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

37974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tutehuri_3\ricazibu.pdb

kernel32

LocalSize InterlockedExchange SetSystemTimeAdjustment GetNumaProcessorNode GetConsoleAliasExesLengthW EnumSystemCodePagesW TlsGetValue CopyFileExW MoveFileWithProgressA VerifyVersionInfoW LocalLock DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA GetModuleHandleA lstrlenW GlobalDeleteAtom SizeofResource WriteConsoleInputA CopyFileW SetWaitableTimer GetVersionExA FindResourceA GetComputerNameExW OpenEventA SearchPathA GetComputerNameA CallNamedPipeA GetProcAddress LoadLibraryA GlobalAlloc FoldStringA GetFileTime GetConsoleAliasesLengthA GetSystemWindowsDirectoryW GetACP SetProcessAffinityMask GlobalFindAtomW VerifyVersionInfoA CreateActCtxA FindNextVolumeA MoveFileWithProgressW CancelDeviceWakeupRequest LocalUnlock GetConsoleFontSize InterlockedCompareExchange GetPrivateProfileStructW EnumCalendarInfoA EnterCriticalSection InterlockedDecrement GetNamedPipeHandleStateW AreFileApisANSI GetTickCount SetLastError WriteConsoleW GetVolumeInformationA GetThreadPriority LoadLibraryW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc DeleteFileA GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetCharWidthA

advapi32

SetThreadToken

Sharing