tmpvw0u04kk

General

Target
tmpvw0u04kk
Size 4.1MB
Sample260602-nde7labv7z
SHA256 d4c06164b881925c75e31d68a8a2ffb0c0a3d8e2670b0b4c1608252609b2175d
MD5 152d640dae76b85521228e11dd89df01
SHA1 788b0ff80e5b6dc235c13daac07a17177e55737a
SHA512 be8b74f9db3f07cc766161f7a15e6ad5019669b400ac6a37350c0364bccfbda71472843ac076a072f95ef9283c3b755ade0b6c657d65ea03e1ea7300a72b10ea
SSDEEP 98304:kOAWOqbssC0o86noEvuTHXqsfaY1bwlmbq6V5PBbNzDHXnLIvtX:tGqbsyCoEMbwsbFx1tfIR
TLSH
T1501633D42940CBF3D4946839E1278752A40219DADB9E4D0A37F91BBD2D383E6C72B74B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpvw0u04kk

File Explorer

tmpvw0u04kk

.exe 4.1MB

IMPHASH 527d89b2056bd8c3abd9712a53dad1df
SHA256 d4c06164b881925c75e31d68a8a2ffb0c0a3d8e2670b0b4c1608252609b2175d
MD5 152d640dae76b85521228e11dd89df01
SHA1 788b0ff80e5b6dc235c13daac07a17177e55737a
SHA512 be8b74f9db3f07cc766161f7a15e6ad5019669b400ac6a37350c0364bccfbda71472843ac076a072f95ef9283c3b755ade0b6c657d65ea03e1ea7300a72b10ea
SSDEEP 98304:kOAWOqbssC0o86noEvuTHXqsfaY1bwlmbq6V5PBbNzDHXnLIvtX:tGqbsyCoEMbwsbFx1tfIR
TLSH
T1501633D42940CBF3D4946839E1278752A40219DADB9E4D0A37F91BBD2D383E6C72B74B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

21:98:f5:30:ca:2b:dc:c8:ef:f5:61:1f:1b:00:9b:89:4e:77:fc:ef:3f:54:b7:55:08:14:19:4f:30:08:40:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

May 27, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

19267

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zade.pdb

kernel32

GetSystemDefaultLangID GetThreadContext WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW MoveFileExA SetEndOfFile InterlockedIncrement SetComputerNameW GetFileAttributesExA GetModuleHandleW GetTickCount GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep AssignProcessToJobObject GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA GetModuleHandleA CreateMutexA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetStartupInfoW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing