tmpl0he80d0

Sharing

Copy URL Twitter E-mail

General

Target
tmpl0he80d0
Size 281KB
Sample260609-fn72csds9n
SHA256 50f923e303e5e3130e4e41704200c36433aeb8ff21f6547cba37263fc2b03f7e
MD5 7c8298f508facfec74a709f66683c1b3
SHA1 7f4587486bf436e672930f921bb54145177de48f
SHA512 5a37e5536cfc9256b96794012032c107fd5402ca315ba7d2315f6d3e1150a21a581c608d124a31b5e06453a6f1c52be96cfb8e749f9247ef2a6a5e192cbbe799
SSDEEP 6144:vLjNVAQq73ts4IMvc6eFrhUBHzeDPHLRc5:vnAlTts4JChyzerHtc5
TLSH
T1D95402237ECD61F2E164193E0AF7D91B814FB5BBA312150FB6A4094F7C6AE301C52EA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpl0he80d0

File Explorer

tmpl0he80d0

.exe 281KB

IMPHASH 23f99ed004dec4de9f827d939eb879d4
SHA256 50f923e303e5e3130e4e41704200c36433aeb8ff21f6547cba37263fc2b03f7e
MD5 7c8298f508facfec74a709f66683c1b3
SHA1 7f4587486bf436e672930f921bb54145177de48f
SHA512 5a37e5536cfc9256b96794012032c107fd5402ca315ba7d2315f6d3e1150a21a581c608d124a31b5e06453a6f1c52be96cfb8e749f9247ef2a6a5e192cbbe799
SSDEEP 6144:vLjNVAQq73ts4IMvc6eFrhUBHzeDPHLRc5:vnAlTts4JChyzerHtc5
TLSH
T1D95402237ECD61F2E164193E0AF7D91B814FB5BBA312150FB6A4094F7C6AE301C52EA5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathIsRelativeW PathFindFileNameW PathRemoveExtensionW PathCanonicalizeW PathIsURLW PathStripToRootW PathStripPathW PathIsRootW PathFileExistsW

gdi32

DeleteDC SetViewportOrgEx SetWindowExtEx CreateMetaFileW RestoreDC SetTextAlign SaveDC CloseMetaFile CreateFontIndirectW LPtoDP GetDeviceCaps SetWindowOrgEx CreateRectRgnIndirect TextOutW DeleteMetaFile DeleteObject SetMapMode

kernel32

GlobalAlloc EnumResourceNamesW FlushInstructionCache FreeLibrary lstrlenA LeaveCriticalSection RaiseException RemoveDirectoryW IsDebuggerPresent lstrlenW LoadResource GetSystemTimeAsFileTime ExpandEnvironmentStringsW GetACP TlsGetValue VirtualFree GetCurrentThreadId GetProcessHeap InterlockedPopEntrySList UnhandledExceptionFilter GlobalUnlock MulDiv LocalAlloc IsProcessorFeaturePresent FindResourceExW WaitForSingleObject IsValidCodePage SetFileAttributesA CreateFileMappingW OutputDebugStringW DeleteCriticalSection GlobalLock GetShortPathNameW GetModuleHandleW GetComputerNameW CreateFileA TlsAlloc CreateFileW CopyFileW SetThreadPriority GetSystemDefaultLCID GetFileSize FindResourceW GetCurrentDirectoryW CreateDirectoryW HeapReAlloc InterlockedPushEntrySList HeapDestroy CopyFileA VirtualAlloc HeapFree FindNextFileW ReadFile FindClose FindFirstFileW MapViewOfFile EnterCriticalSection LockResource WideCharToMultiByte UnmapViewOfFile HeapSize SwitchToThread SetFileAttributesW TlsSetValue HeapAlloc TlsFree CreateThread CreateEventW CloseHandle lstrcmpW SetUnhandledExceptionFilter SizeofResource SetLastError GetFullPathNameW InitializeCriticalSectionAndSpinCount CompareFileTime VirtualAllocEx

oleaut32

SysStringByteLen SysStringLen SysAllocString VariantInit RegisterTypeLi VariantChangeType SafeArrayLock SysFreeString GetErrorInfo VarBstrCat LoadTypeLi DispCallFunc SysAllocStringByteLen SafeArrayCreate SafeArrayUnaccessData SafeArrayCopy VariantClear SafeArrayDestroy LoadRegTypeLi SafeArrayGetUBound VarBstrCmp SysAllocStringLen SafeArrayGetElement VariantCopy SafeArrayGetVartype SafeArrayAccessData SafeArrayGetLBound SafeArrayUnlock OleCreatePropertyFrame UnRegisterTypeLi

user32

RegisterClassExW MonitorFromWindow OffsetRect MessageBoxExW GetParent LoadCursorW SetFocus IntersectRect GetMonitorInfoW EnableWindow GetMenu PtInRect MapWindowPoints CharToOemBuffA UnionRect IsWindowEnabled EndDialog EndPaint CharNextW IsChild SendMessageA BeginPaint MapDialogRect GetClassNameW SetWindowRgn SetCursor GetWindowRect InvalidateRect UnhookWindowsHookEx CreateWindowExW DefWindowProcW SendMessageW UnregisterClassA CallNextHookEx EqualRect PostMessageW GetWindowLongW GetDC DestroyWindow ShowWindow SetWindowPos GetKeyState AdjustWindowRectEx SetWindowTextW SetWindowContextHelpId CallWindowProcW GetClientRect GetFocus ReleaseDC GetClassInfoExW GetWindow SetWindowLongW GetWindowTextLengthW GetWindowTextW IsWindow SetWindowsHookExW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExA RegCreateKeyExW RegEnumKeyExW RegSetValueExW

ole32

CoTaskMemAlloc ProgIDFromCLSID CLSIDFromProgID IIDFromString OleRegEnumVerbs CreateDataAdviseHolder CoCreateInstance StringFromGUID2 OleRegGetMiscStatus CreateStreamOnHGlobal CreateOleAdviseHolder CLSIDFromString OleRegGetUserType StringFromCLSID CoCreateGuid CoTaskMemFree

userenv

GetProfileType UnloadUserProfile FreeGPOListW GetAllUsersProfileDirectoryW DllGetClassObject UnregisterGPNotification

loadperf

InstallPerfDllW