tmp6jmu3w9r

General

Target
tmp6jmu3w9r
Size 4.0MB
Sample260609-mla26shv2n
SHA256 190dad2b833c9ced6e510dacdc295d1b01fec0ac87f6f2954d970ac45bf6e58e
MD5 4d4132d1f69089810e4a9914b33ba85a
SHA1 38cfcbc0fa12903554d1587c373e79450bbf6c8d
SHA512 49d46f6da904bef7598b2971b1903ebb3dc2c90a6f0b7b4a5c0f56494164640f1a47a0e9b87b043a1e3ea04f4eee5349df054bdda14cf5aea07cbdb57e8c5e86
SSDEEP 98304:EwJNQDUVYhKtducIy2ZPzfC4UmzQ1mcU0OVdMp:VJKU2hKtducpcPzK44RU0M4
TLSH
T15D1633263183C8F6D09D403245A6AFF85DE6853134A957B53B9F9EECDB3124843F41EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmp6jmu3w9r

File Explorer

tmp6jmu3w9r

.exe 4.0MB

IMPHASH 3e6038f4356f890c26b700ce3212574e
SHA256 190dad2b833c9ced6e510dacdc295d1b01fec0ac87f6f2954d970ac45bf6e58e
MD5 4d4132d1f69089810e4a9914b33ba85a
SHA1 38cfcbc0fa12903554d1587c373e79450bbf6c8d
SHA512 49d46f6da904bef7598b2971b1903ebb3dc2c90a6f0b7b4a5c0f56494164640f1a47a0e9b87b043a1e3ea04f4eee5349df054bdda14cf5aea07cbdb57e8c5e86
SSDEEP 98304:EwJNQDUVYhKtducIy2ZPzfC4UmzQ1mcU0OVdMp:VJKU2hKtducpcPzK44RU0M4
TLSH
T15D1633263183C8F6D09D403245A6AFF85DE6853134A957B53B9F9EECDB3124843F41EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f3:e6:6a:99:2a:04:65:f1:ed:12:2d:bc:8a:d5:8f:5d:73:b3:16:6a:77:50:27:f9:63:58:3b:9f:b1:67:13:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

21317

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wezabicowis_91-rezahupiyic.pdb

kernel32

GetSystemDefaultLangID InterlockedIncrement VerSetConditionMask GetConsoleAliasA WaitNamedPipeA SetFirmwareEnvironmentVariableA HeapFree SetComputerNameW GetFileAttributesExA GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GlobalAlloc SetFileShortNameW LoadLibraryW Sleep GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetGeoInfoA RaiseException SetLastError GetProcAddress VirtualAlloc IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringA GetModuleHandleA CreateMutexA FindNextFileW SetFileShortNameA LCMapStringW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP SetStdHandle WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount HeapAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleOutputCP HeapSize CreateFileA CloseHandle

user32

GetDC

Sharing