tmp12djxnoo

General

Target
tmp12djxnoo
Size 4.1MB
Sample260609-mfllqagx7w
SHA256 a7f20008ba6092e20b5bb25e18576cb8581e4a157ce697cdf6aaa1a3b6af4ba7
MD5 af6e907ce2810d61c2f8697393f995e4
SHA1 ea85421854f4cb23fd990b416bd3242851957c14
SHA512 9308389cae89f09d90082a997f98a7a9fe9b0452d85a609e0879689738a72f2a4f5f1794365e83c964d071295dbd7c475db47f6ba5f46a3d9fa9e4f776476b1f
SSDEEP 98304:pb6XIDicWHg9Jw1qgOOLtd78J59qliFeP:N6YDxag9Jw1qLMdYltFeP
TLSH
T1E11633013852E8FAC6060670451ADFF627AF9D334DAD894E7308A76D2E395C0697B26F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp12djxnoo

File Explorer

tmp12djxnoo

.exe 4.1MB

IMPHASH 86121436ff5ad4d639bb9d7e4c098681
SHA256 a7f20008ba6092e20b5bb25e18576cb8581e4a157ce697cdf6aaa1a3b6af4ba7
MD5 af6e907ce2810d61c2f8697393f995e4
SHA1 ea85421854f4cb23fd990b416bd3242851957c14
SHA512 9308389cae89f09d90082a997f98a7a9fe9b0452d85a609e0879689738a72f2a4f5f1794365e83c964d071295dbd7c475db47f6ba5f46a3d9fa9e4f776476b1f
SSDEEP 98304:pb6XIDicWHg9Jw1qgOOLtd78J59qliFeP:N6YDxag9Jw1qLMdYltFeP
TLSH
T1E11633013852E8FAC6060670451ADFF627AF9D334DAD894E7308A76D2E395C0697B26F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e6:5e:43:90:6c:88:70:fc:3d:a8:f0:82:23:7f:dd:06:74:40:fd:0a:80:6f:ac:bf:14:6e:ac:06:fa:22:16:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

30432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nusadoz\sovudoc barowok-la.pdb

kernel32

MoveFileExA IsBadHugeReadPtr SetEndOfFile GetConsoleAliasExesLengthA GetConsoleAliasA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA GetTickCount EnumCalendarInfoExW ConvertFiberToThread WaitNamedPipeW EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW ReadConsoleInputA SetVolumeMountPointA GetFileAttributesA SetTimeZoneInformation WriteConsoleW GetGeoInfoA GetBinaryTypeW GetVolumePathNameA WritePrivateProfileStringW GetCPInfoExW TlsGetValue GetLastError GetProcAddress VirtualAlloc GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc DnsHostnameToComputerNameA GetFileType CreateEventW AddAtomA FoldStringA FindNextFileA SetConsoleCursorInfo GetModuleHandleA FindFirstChangeNotificationA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW SetFileShortNameA GetVersionExA SetFileValidData FindActCtxSectionStringW LCMapStringW IsBadStringPtrW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers HeapSize GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

Sharing