tmp7k9s7u_w

General

Target
tmp7k9s7u_w
Size 4.1MB
Sample260609-ml65lsgy4x
SHA256 a6befaa750463e5240fd45b224f6dc642fe3de5091b33265dea1f25d588f713f
MD5 7718303de63320b2185b26f68881290c
SHA1 4c0f4962ec9bdb3cb75620ce78fbc8174461deb0
SHA512 aa806e4e8db782db68175b66542086a76e391648690dc8d4efa7a37fb99c402088bbd9020728d43d3e112df29538510d4372520f1ea697bd631dd3e537c4ec81
SSDEEP 98304:1+zaglqUj9rOJGWyhm1p4P+8mSe4HTvFS+08NuWJr:GKYIchjP+8mX4H8+0GuWJr
TLSH
T1221633223142C371DC561030E1B4CE3265BBE9767A6D81D33AEA1B8A9D28EC4F67175F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp7k9s7u_w

File Explorer

tmp7k9s7u_w

.exe 4.1MB

IMPHASH 55ce9fb6dc30e1e2bdf26439f9e36d01
SHA256 a6befaa750463e5240fd45b224f6dc642fe3de5091b33265dea1f25d588f713f
MD5 7718303de63320b2185b26f68881290c
SHA1 4c0f4962ec9bdb3cb75620ce78fbc8174461deb0
SHA512 aa806e4e8db782db68175b66542086a76e391648690dc8d4efa7a37fb99c402088bbd9020728d43d3e112df29538510d4372520f1ea697bd631dd3e537c4ec81
SSDEEP 98304:1+zaglqUj9rOJGWyhm1p4P+8mSe4HTvFS+08NuWJr:GKYIchjP+8mX4H8+0GuWJr
TLSH
T1221633223142C371DC561030E1B4CE3265BBE9767A6D81D33AEA1B8A9D28EC4F67175F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

14:b9:70:73:56:39:49:d8:72:24:20:34:c7:a1:86:4a:e5:42:7b:45:b9:80:41:3f:06:eb:5c:67:20:45:16:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

27295

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\daxenehuveceto\xepuvusor\buweyivowod-pama.pdb

kernel32

MoveFileExA LoadResource GetConsoleAliasA InterlockedDecrement WaitNamedPipeA WriteConsoleInputA SetComputerNameW CreateHardLinkA GetConsoleAliasesLengthA GetGeoInfoW GetConsoleCP GetSystemDirectoryW SetFileShortNameW LoadLibraryW AssignProcessToJobObject HeapDestroy GetFileAttributesA GetConsoleAliasW GetConsoleAliasExesA lstrlenW LCMapStringA FillConsoleOutputCharacterW GetLastError GetProcAddress VirtualAlloc OpenWaitableTimerA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc AddAtomW CreateEventW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW ReadConsoleInputW WriteConsoleW GetSystemDefaultLangID SetUnhandledExceptionFilter HeapAlloc GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate SetHandleCount GetFileType GetStartupInfoA SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind WideCharToMultiByte GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RaiseException SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

IsTokenUntrusted

Sharing