tmph_d48ccu

Sharing

Copy URL Twitter E-mail

General

Target
tmph_d48ccu
Size 254KB
Sample260609-pyra2abs4k
SHA256 0a4cc9853314d239f89249e5b6acae8ab2d3e5afbd9e124b6571517a12a00a80
MD5 2bafe52150d3c2f18382848d832e3211
SHA1 31182a580758a69c3dcdbe8fb3e6e4126bbc7dc0
SHA512 981c60770f7cefd705a010ac438f74cdefce2f7f5d6d0c4c3a5d519e8b662aa18b070514ce8c4cb6e70a81a1a9be7acd1e66b7a8035817abdac60ca86029dc5d
SSDEEP 6144:8/FsObxyl2q+qGFcSRlQLyQrByo+kdwVBkKeX:8/hMl2FqGIRA9IwVBkX
TLSH
T10644D0016292CC73E81781BF858BC3695A773D757D169D837BC50EEA8A3D2E3EA12305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmph_d48ccu

File Explorer

tmph_d48ccu

.exe 254KB

IMPHASH ac7bbeb6012172c57d34d0c9adfb8d71
SHA256 0a4cc9853314d239f89249e5b6acae8ab2d3e5afbd9e124b6571517a12a00a80
MD5 2bafe52150d3c2f18382848d832e3211
SHA1 31182a580758a69c3dcdbe8fb3e6e4126bbc7dc0
SHA512 981c60770f7cefd705a010ac438f74cdefce2f7f5d6d0c4c3a5d519e8b662aa18b070514ce8c4cb6e70a81a1a9be7acd1e66b7a8035817abdac60ca86029dc5d
SSDEEP 6144:8/FsObxyl2q+qGFcSRlQLyQrByo+kdwVBkKeX:8/hMl2FqGIRA9IwVBkX
TLSH
T10644D0016292CC73E81781BF858BC3695A773D757D169D837BC50EEA8A3D2E3EA12305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

174658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DefWindowProcW LoadIconA UnregisterClassA CheckMenuItem PostMessageW SetWindowLongW DestroyIcon ReleaseDC MessageBeep LoadStringW SendMessageW ReleaseCapture InflateRect DestroyMenu CreateWindowExW SetWindowTextW GetMenuStringW SetTimer CreateWindowExA RegisterClassW DestroyWindow SetCapture

advapi32

RegCreateKeyExA

ole32

CoInitialize OleCreate CoUninitialize

opengl32

glClear

kernel32

CompareStringA GetTimeZoneInformation IsValidCodePage IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA CompareStringW LCMapStringA GetLocaleInfoW GetLocaleInfoA MultiByteToWideChar HeapSize RtlUnwind HeapReAlloc Sleep GetOEMCP GetACP LCMapStringW SetUnhandledExceptionFilter GetCPInfo InitializeCriticalSection LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler GetVersionExA GetCurrentThread VirtualAlloc GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA IsDebuggerPresent GetLastError GetProcAddress LoadLibraryW GetCommandLineW lstrlenW GetVersionExW CloseHandle CreateEventW ExitProcess GetTickCount HeapFree HeapAlloc GetProcessHeap GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetEnvironmentVariableA GetModuleHandleA WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection