tmp8l1qlpvq

General

Target
tmp8l1qlpvq
Size 4.1MB
Sample260602-nbtbfabv41
SHA256 73107485abec79450fa3f44bb6f586b5331eaccaaa9453edf67399dea3123eb0
MD5 b3b33b79facc3d69d9a6d624afa78059
SHA1 cf248a5b080dba3936708944993762ca725ad3ff
SHA512 40218ab6c684e0722820a006849f5ff2c38c0de67ae5b4b53999df43440aa6ad5d616c9ee0cb1a7487fa28c08256d8f44a34919baeb1be8ef019e08505bd5bc6
SSDEEP 98304:nEc+TbmsmETfwYZUIZCkRiRe/HVxjiwBmUAdMBAvHc1unhjuGl++T:EcEmszTfwY3CkRiY/1xRmUAsAvHc1un7
TLSH
T14B16333538928037F62A897145A49AF08F2D7C73E6A05787F7D6273E0F323D9D924259
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp8l1qlpvq

File Explorer

tmp8l1qlpvq

.exe 4.1MB

IMPHASH 47f3841b8380a704a9ff258e0444ec1d
SHA256 73107485abec79450fa3f44bb6f586b5331eaccaaa9453edf67399dea3123eb0
MD5 b3b33b79facc3d69d9a6d624afa78059
SHA1 cf248a5b080dba3936708944993762ca725ad3ff
SHA512 40218ab6c684e0722820a006849f5ff2c38c0de67ae5b4b53999df43440aa6ad5d616c9ee0cb1a7487fa28c08256d8f44a34919baeb1be8ef019e08505bd5bc6
SSDEEP 98304:nEc+TbmsmETfwYZUIZCkRiRe/HVxjiwBmUAdMBAvHc1unhjuGl++T:EcEmszTfwY3CkRiY/1xRmUAsAvHc1un7
TLSH
T14B16333538928037F62A897145A49AF08F2D7C73E6A05787F7D6273E0F323D9D924259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

29:89:f3:d2:02:45:6e:02:4c:38:dd:d4:c7:99:cd:51:37:82:d7:00:24:19:8a:39:87:6e:1a:e3:9e:9b:0c:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

40566

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xip.pdb

kernel32

GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort ReadConsoleA lstrcpynW WriteConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError CopyFileW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing