tmpwqmmpvvm

General

Target
tmpwqmmpvvm
Size 4.1MB
Sample260609-mh924agy2w
SHA256 1b6890b6226e5585a094f99441fee2cae174bbc35dad591879f2c4be3b14e4bc
MD5 5515fb6d35014ca512aaae33282cb51c
SHA1 5babe4ea0b97db234bec7329b7cdfc3dc4e251e9
SHA512 72ddc483c1bfd57620317aab4a5b78dfd6343e8ecf9e150dc49296aeedca0eede8ff8707f1ca03edae3eb1aa174e1b467f72231c2a1a9fa487edf73d835f219c
SSDEEP 98304:Ustc9h6HhXbY7h4mtIEPRbrmVbE44vzFbL3cim9aorSCR6V11F:5FBXb62mtPNmhE/5Yim936VF
TLSH
T14C1633563EA0D2B0F6838031D132DEE171FDFAF15A4F0E43B56835BD2481691696B2BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpwqmmpvvm

File Explorer

tmpwqmmpvvm

.exe 4.1MB

IMPHASH 0094705b2c9b847219b2817888057ed6
SHA256 1b6890b6226e5585a094f99441fee2cae174bbc35dad591879f2c4be3b14e4bc
MD5 5515fb6d35014ca512aaae33282cb51c
SHA1 5babe4ea0b97db234bec7329b7cdfc3dc4e251e9
SHA512 72ddc483c1bfd57620317aab4a5b78dfd6343e8ecf9e150dc49296aeedca0eede8ff8707f1ca03edae3eb1aa174e1b467f72231c2a1a9fa487edf73d835f219c
SSDEEP 98304:Ustc9h6HhXbY7h4mtIEPRbrmVbE44vzFbL3cim9aorSCR6V11F:5FBXb62mtPNmhE/5Yim936VF
TLSH
T14C1633563EA0D2B0F6838031D132DEE171FDFAF15A4F0E43B56835BD2481691696B2BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

13:4e:55:26:90:b2:7b:83:21:ed:f0:cf:0a:54:1c:96:39:67:7c:05:cf:aa:7a:6b:a3:c0:ea:4a:5a:1a:ab:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

19657

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dohahocebez59\ruworekomisaz\watalek_horow_wajeyucapasi-kaka\n.pdb

kernel32

GetConsoleAliasExesA MoveFileExA SetEndOfFile GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW Sleep AssignProcessToJobObject HeapDestroy GetFileAttributesA CreateMutexW WriteConsoleW lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA UnhandledExceptionFilter OpenWaitableTimerW LocalAlloc AddAtomW CreateEventW FindNextFileW GetFileAttributesExW ReadConsoleInputW GetConsoleAliasW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate RtlUnwind SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage WideCharToMultiByte GetConsoleMode MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleOutputCP FlushFileBuffers GetProcessHeap ReadFile RaiseException

advapi32

IsTokenUntrusted

Sharing