tmpoq3q3a3y

General

Target
tmpoq3q3a3y
Size 4.1MB
Sample260609-mkwx9agy3x
SHA256 040789b7b6cd462a36acd438d2d4f5b66a8bad171b94c76bc60989767c43eaa6
MD5 75534a8817ad114ca5f5fc57d122b73a
SHA1 3f356b5744290264800fd1d9d9661ebd080149b5
SHA512 65abef761ca1f1c8c24673c29a89c70a4132a622321cbaa64d1a1fe18200a8b9bc873f75062af88eb3fbf6eeec937a8a8c0285d7f765b3e68cdf15784499182b
SSDEEP 98304:FYrIOxcrspF4T2IXzLnDYkWRz7BipbCnquodQdw5aX:ecKgsn4T2IHDRpbwXiA
TLSH
T17B163352A5A2C0B7C01A31BACA0ED7375F3B24296614CC9B7BB611CDBC722F16931ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpoq3q3a3y

File Explorer

tmpoq3q3a3y

.exe 4.1MB

IMPHASH bc57832ec1fddf960b28fd6e06cc17ba
SHA256 040789b7b6cd462a36acd438d2d4f5b66a8bad171b94c76bc60989767c43eaa6
MD5 75534a8817ad114ca5f5fc57d122b73a
SHA1 3f356b5744290264800fd1d9d9661ebd080149b5
SHA512 65abef761ca1f1c8c24673c29a89c70a4132a622321cbaa64d1a1fe18200a8b9bc873f75062af88eb3fbf6eeec937a8a8c0285d7f765b3e68cdf15784499182b
SSDEEP 98304:FYrIOxcrspF4T2IXzLnDYkWRz7BipbCnquodQdw5aX:ecKgsn4T2IHDRpbwXiA
TLSH
T17B163352A5A2C0B7C01A31BACA0ED7375F3B24296614CC9B7BB611CDBC722F16931ED5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

88:d6:de:6f:85:54:bb:45:39:83:0a:03:26:c6:ed:79:e7:b0:20:49:ee:f9:ef:0b:d6:a5:2b:84:be:84:b0:b5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

29024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\joyadafipaca13\komomuyanigosu97_fomiho\buz.pdb

kernel32

TlsGetValue SetEndOfFile InterlockedIncrement GetConsoleAliasA SetComputerNameW MoveFileWithProgressA IsBadReadPtr WaitNamedPipeW SetCommTimeouts EnumResourceTypesA SetFileShortNameW LoadLibraryW CreateEventA SetVolumeMountPointA GetFileAttributesA DnsHostnameToComputerNameW GetFileAttributesW SetTimeZoneInformation GetGeoInfoA GetBinaryTypeW IsBadStringPtrA LCMapStringA CreateMutexW GetLastError GetProcAddress VirtualAlloc HeapSize GlobalGetAtomNameA SetFileAttributesA LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA FindNextFileA GetModuleHandleA VirtualProtect GetFileAttributesExW ReadConsoleInputW GetVersion SetFileValidData GetSystemDefaultLangID GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement Sleep ExitProcess EnterCriticalSection LeaveCriticalSection RtlUnwind HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount ReadFile CloseHandle CreateFileA RaiseException SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap

advapi32

DeregisterEventSource

ole32

OleQueryLinkFromData

Sharing