tmp69bv9056

Sharing

Copy URL Twitter E-mail

General

Target
tmp69bv9056
Size 2.6MB
Sample260609-bfkhwaaw2n
SHA256 5e2382ba5822edc0780c09f58a5a13bc737ac9cc846d89a93a862a64262947ea
MD5 35c783567e26df468686248c5b0fafa7
SHA1 a5075f53216abf7b5b4f7a7bbe76995e07f6eb25
SHA512 f8cfd956b7273446ee8fb39f769696277f150f56bdcd36972f7955afa9cdd21e36d4f1885fb3bb45dd29222e6821d00049551f00e51e54f11e48461d1f4b25ab
SSDEEP 49152:+0/65Hg2Bu2zCGBC2xzT1DjmtbsuGyeoLn6w:34TzTuz0oLn6w
TLSH
T18CC55A062B3F4A9DC514C4BE967B1263D569BD0CD028B8758DC04F457FA2F60A2BA7EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp69bv9056

File Explorer

tmp69bv9056

.dll 2.6MB

IMPHASH e4a86d4171ecc771cbe518b0841def67
SHA256 5e2382ba5822edc0780c09f58a5a13bc737ac9cc846d89a93a862a64262947ea
MD5 35c783567e26df468686248c5b0fafa7
SHA1 a5075f53216abf7b5b4f7a7bbe76995e07f6eb25
SHA512 f8cfd956b7273446ee8fb39f769696277f150f56bdcd36972f7955afa9cdd21e36d4f1885fb3bb45dd29222e6821d00049551f00e51e54f11e48461d1f4b25ab
SSDEEP 49152:+0/65Hg2Bu2zCGBC2xzT1DjmtbsuGyeoLn6w:34TzTuz0oLn6w
TLSH
T18CC55A062B3F4A9DC514C4BE967B1263D569BD0CD028B8758DC04F457FA2F60A2BA7EC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1951984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

FlushFileBuffers WriteFile SetStdHandle GetConsoleCP HeapSize GetStringTypeW GetConsoleMode WriteConsoleW CloseHandle CreateFileW AddAtomA DeleteAtom CreateEventA ResetEvent SetEvent LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetFileValidData SetFilePointerEx SetFilePointer SetEndOfFile GetFileType GetFileSizeEx CreateFileA GetSystemDefaultLocaleName lstrcmpiW HeapReAlloc ExitProcess GetStdHandle GetProcessHeap LCMapStringW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte HeapFree HeapAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException

user32

CallWindowProcA DrawMenuBar TrackPopupMenu PaintDesktop WindowFromDC GetWindowDC ExcludeUpdateRgn IsGUIThread SubtractRect ClientToScreen ClipCursor ShowCursor InvalidateRect

gdi32

GetKerningPairsA SetBitmapDimensionEx PolyBezierTo MoveToEx FillPath CombineTransform GetEnhMetaFileHeader CopyEnhMetaFileA GdiGradientFill SetMetaFileBitsEx SetDIBitsToDevice SetBitmapBits SetMetaRgn RectInRegion RemoveFontMemResourceEx RemoveFontResourceExA GetTextExtentExPointI GetRandomRgn GetDIBits GetCharWidth32A GetDCPenColor GetBkColor ExtFloodFill BitBlt UnrealizeObject

ole32

CoRevokeMallocSpy CoAllowSetForegroundWindow StringFromIID CoMarshalInterThreadInterfaceInStream CoUnmarshalHresult

gdiplus

GdiplusStartup

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

59KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

614KB

Virtual Size

631KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

tmp69bv9056

kernel32

user32

gdi32

ole32

gdiplus

generic