Overview

overview

10

Static

static

3

tmp0ot2fq5w.exe

windows10-ltsc_2021-x64

10

tmp0ot2fq5w.exe

windows10-2004-x64

10

tmp0ot2fq5w.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp0ot2fq5w
  • Size 4.1MB
  • Sample260602-nrmtlabz5v
  • SHA256 2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • tmp0ot2fq5w
    .exe 4.1MB

tmp0ot2fq5w

  • IMPHASH 786d17afd21551fd45869191bfebc781
  • SHA256 2b91ce8571d6ceb8f7e60ff0bf041c7ba7de196d6c7e1856ccaee2c33128fe38
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
28:8a:78:32:ec:9f:70:e2:e8:05:f0:fc:94:90:e7:cd:97:ee:83:ed:3e:da:18:64:4c:7e:3c:d3:56:93:9d:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
POSTALCODE=10305
Minor OS version
0
Major OS version
5
Entry point
30897
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\firajaku\tayicososun63\japetaz\juwi.pdb