tmphwoafbea

General

Target
tmphwoafbea
Size 4.1MB
Sample260609-mjmcesht8l
SHA256 1852fad10bc89f2f1230a082a54d3c20f4777ef0fcac91a8bbc504e021157698
MD5 8680bbad039e2fde988b57d1d862be17
SHA1 ce2b5352603a18f589c6da2784bbb196d9aefe1e
SHA512 0210265d8a5af7345613f8399a0245de0c55d32306f8507af236b8c469494fcd8ba080b27dba05359472129ae5c02a6bef39b8f35fdd79a09e8108a6bcf2e496
SSDEEP 98304:E92/ACcoXMYvJHjO59/yntffCsltt6rzbhM1OKEcghg:vY0XMiJDc9uCyi3Hcg+
TLSH
T19F163334B941C1B6C18960F454439F29CE7FEA72628CD09B7B187FAE58963A41AF131F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmphwoafbea

File Explorer

tmphwoafbea

.exe 4.1MB

IMPHASH e9fe76cfeb16d2044a6c366e7db1d4d5
SHA256 1852fad10bc89f2f1230a082a54d3c20f4777ef0fcac91a8bbc504e021157698
MD5 8680bbad039e2fde988b57d1d862be17
SHA1 ce2b5352603a18f589c6da2784bbb196d9aefe1e
SHA512 0210265d8a5af7345613f8399a0245de0c55d32306f8507af236b8c469494fcd8ba080b27dba05359472129ae5c02a6bef39b8f35fdd79a09e8108a6bcf2e496
SSDEEP 98304:E92/ACcoXMYvJHjO59/yntffCsltt6rzbhM1OKEcghg:vY0XMiJDc9uCyi3Hcg+
TLSH
T19F163334B941C1B6C18960F454439F29CE7FEA72628CD09B7B187FAE58963A41AF131F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b5:8d:34:93:91:1a:2b:b2:ca:2e:1e:61:48:e2:b6:f8:10:62:0b:27:6f:f6:24:40:74:c5:05:66:14:15:53:2e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

29456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zifitisazuh\bihal\dugalutuzac.pdb

kernel32

SetEndOfFile FindActCtxSectionGuid SetConsoleTextAttribute GetConsoleAliasA WaitNamedPipeA HeapFree SetComputerNameW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA EnumCalendarInfoExW FindResourceExA SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA SetVolumeMountPointA GetConsoleAliasExesLengthW GetFileAttributesA WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation GetVolumePathNameA IsBadStringPtrA WritePrivateProfileStringW GetLastError GetProcAddress IsBadHugeReadPtr PeekConsoleInputW CreateTimerQueueTimer GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc AddAtomW FoldStringW EnumResourceTypesW GlobalWire FindNextFileA SetConsoleCursorInfo GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetShortPathNameW GetCPInfoExA SetFileShortNameA GetVersionExA EnumResourceLanguagesW SetFileValidData DeleteFileA MoveFileExA VirtualAlloc FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetProcessHeap

user32

ClientToScreen

advapi32

DeregisterEventSource BackupEventLogW

Sharing