tmpgymwcob2

General

Target
tmpgymwcob2
Size 4.1MB
Sample260609-mk32kagy31
SHA256 be2bde4435df79e78c5bffb6ae91d8b457ab638f647304c4aad70ea15ebe3651
MD5 d133275e1fe463c2396fb224e2f5d976
SHA1 53b277a2d6fe8ecb0fd82c39159751fe969e9d7e
SHA512 53ffbe75bbff1cbd4e2d0bb58721fa75fda4c6f54aa6835d8c4f64759b2fe590a65c757aea17dd50aad92afdc06f7bd662058a0cf62611c6c543d29637f3e921
SSDEEP 98304:3VkRQKr7iZOZ9VY8Du6e5b3d4vTS5QIUpE67LNmff:FcvioZXY8DenYTqQIUZmff
TLSH
T10A1633143A40B5A4C8361D305F16CAA25BFFBDB1416556ABBBA047EA2D373D02D263CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpgymwcob2

File Explorer

tmpgymwcob2

.exe 4.1MB

IMPHASH 431995fc4e1c6b7aa6a3a333f4d305c5
SHA256 be2bde4435df79e78c5bffb6ae91d8b457ab638f647304c4aad70ea15ebe3651
MD5 d133275e1fe463c2396fb224e2f5d976
SHA1 53b277a2d6fe8ecb0fd82c39159751fe969e9d7e
SHA512 53ffbe75bbff1cbd4e2d0bb58721fa75fda4c6f54aa6835d8c4f64759b2fe590a65c757aea17dd50aad92afdc06f7bd662058a0cf62611c6c543d29637f3e921
SSDEEP 98304:3VkRQKr7iZOZ9VY8Du6e5b3d4vTS5QIUpE67LNmff:FcvioZXY8DenYTqQIUZmff
TLSH
T10A1633143A40B5A4C8361D305F16CAA25BFFBDB1416556ABBBA047EA2D373D02D263CF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

31:50:da:f7:0f:41:6a:23:82:e5:35:a8:ce:4c:df:7f:4a:72:0d:4f:ba:51:57:85:96:e6:11:c2:27:dc:1f:94

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

30256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yeyu.pdb

kernel32

TlsGetValue MoveFileExA SetEndOfFile FindResourceExW GetConsoleAliasExesLengthA GetConsoleAliasA InterlockedDecrement SetVolumeMountPointW SetThreadExecutionState GetSystemDefaultLCID GetFileAttributesExA IsBadReadPtr ConvertFiberToThread GetGeoInfoW WaitNamedPipeW SetCommTimeouts EnumResourceTypesA GlobalAlloc SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadStringPtrW GetCPInfoExW GetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA GlobalGetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc GetFileType WritePrivateProfileStringA AddAtomA FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW GetVersion SetFileValidData EnumCalendarInfoExA SetFileAttributesW LCMapStringW GetBinaryTypeW CreateMutexW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc ReadFile CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount SetStdHandle FlushFileBuffers GetConsoleOutputCP MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing