tmpdfws6pmk

General

Target
tmpdfws6pmk
Size 4.1MB
Sample260609-mly41agy4v
SHA256 d1e830639c525fb128cbebcef95201da7b3ca37f9763d024b831eac041ee4404
MD5 71f4c864ab93e6f1b573abbde5ce84a4
SHA1 d63b0366b7519ff9ec2b79f77037afca76f48001
SHA512 25f3c58618d24b4c1181c4f6ba3c8330602410904f67ce6a5f8bfb2c97fd57ff0a773f4cc08f062424b88038f74a808f5c5f9ee039926979e0634ed67c6160ee
SSDEEP 98304:jnZUu9JR+exWlvjupUXbpzH+2QzbzkpxHzQQkveEUmnhGstH:bFJRVxOXZe2QDk/WeEUqGstH
TLSH
T18E1633D2B572D032ECA17A759D34C6E0BAAB61F2D964C4077278342CAE754D1E03F7A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
tmpdfws6pmk

File Explorer

tmpdfws6pmk

.exe 4.1MB

IMPHASH d0b3fbb5ee505012f25dd31472a51d04
SHA256 d1e830639c525fb128cbebcef95201da7b3ca37f9763d024b831eac041ee4404
MD5 71f4c864ab93e6f1b573abbde5ce84a4
SHA1 d63b0366b7519ff9ec2b79f77037afca76f48001
SHA512 25f3c58618d24b4c1181c4f6ba3c8330602410904f67ce6a5f8bfb2c97fd57ff0a773f4cc08f062424b88038f74a808f5c5f9ee039926979e0634ed67c6160ee
SSDEEP 98304:jnZUu9JR+exWlvjupUXbpzH+2QzbzkpxHzQQkveEUmnhGstH:bFJRVxOXZe2QDk/WeEUqGstH
TLSH
T18E1633D2B572D032ECA17A759D34C6E0BAAB61F2D964C4077278342CAE754D1E03F7A2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

68:79:5d:f0:92:82:54:5b:d4:11:91:9e:cb:ce:89:7b:94:3a:cf:23:e5:0b:c3:db:9e:49:c4:5f:fd:57:cb:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10305

Chains

Jun 8, 2026

POSTALCODE=10305

Minor OS version

0

Major OS version

5

Entry point

19360

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hiworiwogi\veyeyewokajid\madik\13.pdb

kernel32

GetSystemDefaultLangID GetThreadContext CreateMutexW WriteConsoleInputW lstrlenA GetConsoleAliasesLengthW MoveFileExA SetEndOfFile InterlockedIncrement GetFileAttributesExA GetModuleHandleW GetGeoInfoW GetConsoleAliasExesW WaitNamedPipeW WriteFile GlobalAlloc GetSystemDirectoryW LoadLibraryW Sleep GetFileAttributesA EnumSystemCodePagesA GetConsoleAliasW GetFileAttributesW WriteConsoleW GetVolumePathNameA LCMapStringA GetLastError GetProcAddress VirtualAlloc FreeUserPhysicalPages SetComputerNameA LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc CreateHardLinkW CreateEventW WriteProfileSectionW AddAtomA OpenJobObjectW FindNextFileA GetModuleHandleA FindNextFileW ReadConsoleInputW LCMapStringW HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind SetHandleCount GetFileType SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar CloseHandle CreateFileA SetStdHandle HeapSize GetLocaleInfoA GetConsoleOutputCP GetStringTypeA GetStringTypeW FlushFileBuffers GetProcessHeap ReadFile RaiseException

Sharing