Overview

overview

10

Static

static

3

tmpldlo0u4p.exe

windows10-ltsc_2021-x64

10

tmpldlo0u4p.exe

windows10-2004-x64

10

tmpldlo0u4p.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmpldlo0u4p
  • Size 4.1MB
  • Sample260602-nqs9zsbz21
  • SHA256 199a926fd5a6280ff022d4ab8af72d8912c29ecdfffd395f2bc2abbcf1f08da6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmpldlo0u4p
    .exe 4.1MB

tmpldlo0u4p

  • IMPHASH a7a46e8048e804699368d22fff8c2cfd
  • SHA256 199a926fd5a6280ff022d4ab8af72d8912c29ecdfffd395f2bc2abbcf1f08da6
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
dc:9d:db:9e:b9:e2:21:47:64:d0:90:c4:f5:ed:ea:f3:e3:cf:49:2e:67:37:32:c9:da:e8:de:43:ca:9c:5e:f0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
41542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\ciga\dijucirese\muwemakox\pajogah.pdb