tmp_xzjqtp3

General

Target
tmp_xzjqtp3
Size 4.0MB
Sample260609-mhewysht7l
SHA256 85d2401f556bbd0b79297766abdb4e4d5e9801611e3d175a3e8c4a6de788d370
MD5 d979d6a76a81a064d67bb1d9d5e04a99
SHA1 4bab37bc41804fb33578297baa053be083644cca
SHA512 1ac424e638ea5e51c77bcc622aca643fe644e6bcdb0d2860a91e8affa6e705ddcfef228f62e5f36e75af012577bc152dc5be7186307718cba7082bed15835bab
SSDEEP 98304:ZbERpZMVeayo7S5a85QuD9vgCrljshGwoWUAIeIwijF1+2oVi:WZMgayoO48LnrMGwo+I5wiCc
TLSH
T175163305BD408972E6379AF38404C4B59CF6BF1381B089272B75DA3E3E3675216D8F9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp_xzjqtp3

File Explorer

tmp_xzjqtp3

.exe 4.0MB

IMPHASH 3e6038f4356f890c26b700ce3212574e
SHA256 85d2401f556bbd0b79297766abdb4e4d5e9801611e3d175a3e8c4a6de788d370
MD5 d979d6a76a81a064d67bb1d9d5e04a99
SHA1 4bab37bc41804fb33578297baa053be083644cca
SHA512 1ac424e638ea5e51c77bcc622aca643fe644e6bcdb0d2860a91e8affa6e705ddcfef228f62e5f36e75af012577bc152dc5be7186307718cba7082bed15835bab
SSDEEP 98304:ZbERpZMVeayo7S5a85QuD9vgCrljshGwoWUAIeIwijF1+2oVi:WZMgayoO48LnrMGwo+I5wiCc
TLSH
T175163305BD408972E6379AF38404C4B59CF6BF1381B089272B75DA3E3E3675216D8F9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

32:73:1c:a4:90:68:de:2d:9e:f9:b3:b7:49:7f:b8:03:67:46:4e:18:23:f1:d1:d6:16:86:a3:7a:35:1a:4f:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

21333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yogasebidoge\zivecafoyociv\bakupinuwajeze\17\nicah\95-pahes.pdb

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW GetFileAttributesExA GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA LCMapStringW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

GetDC

Sharing