tmggm118.zip
- SHA256 a41956e4f972c224f92a9843b00cced667a4e74f3b6365787f005830994d9af8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TMGNfo.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
TMGNfo.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
keygen.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
keygen.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target tmggm118.zip
- Size 32KB
- Sample260910-pp2emswygv
- SHA256 a41956e4f972c224f92a9843b00cced667a4e74f3b6365787f005830994d9af8
- MD5 e5b400632798588b20384f7edff31921
- SHA1 ff8bbdbd4ec8b8138fcf7bc538703b748ccd5ae0
- SHA512 84d99618fbe18dc4c2c25c58954ff56beddef1bb4238bd60b9a5ea14b207b9a4f4e072d22d49649cc2b93d2666e335c5a7b2d6fd4c34be97f58a47d978450700
- SSDEEP 768:AZSi5yqjDACUpoCahOJIqqD/Mmox2KwxkTuLcZsn:Afdn/+oCTJI5/Pq27kirn
- TLSH T19CE2F10488A52A91C0CCC6BEED4825289237A090BF3CCB7ED64355F52EF71D2DE07A69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TMGNfo.exe unpack002/keygen.exe
File Explorer
-
tmggm118.zip.zip 32KB
-
RipLand.nfo447B
-
TMGNfo.exe.exe 33KB
-
file_id.diz669B
-
tmg.nfo8KB
-
tmggm118.rar.rar 5KB
-
keygen.exe.exe 5KB
RipLand.nfo
- SHA256 ba3cebdb83db3d98a64f8e4c6e0958da43a1550592a422ff40af1fefc9df013d
- MD5 c720d65877794a22f31ce56391cda7d8
- SHA1 aa33bc2ab25ca2d954d53a9bcf8075782b27ffa5
- SHA512 1b72b65d4e0009fd4af2ad68efaef195f1a53558dc915a4bda976eb21656d6217e6e00de91c31d915695b5db3b9206674d234c49229084208a4ae56af6434c5c
- TLSH T1B4F0B14A2A36D8EDFF406B74C2555101E13A3A9F942C2485342E3BB26F1F3F72391576
- MD5 SHA1 SHA512 TLSH
TMGNfo.exe
- SHA256 8cdb60f9adb2bee890fb25a2070499ab4806918193afe39d2bdc4c4a41face2c
- MD5 bd64eb4cb15f43de4f243bb5db40905e
- SHA1 99493d5354d1a761dc9f1050c42575adc4b5c61b
- SHA512 db9ac23c1571125e0d5fd4ee7ab026fa7055db6db558ad1c93dedddb8016989a781211c0510808cb1ff17e73a0284da72a910e636c6917f5d29285685f00b2b4
- SSDEEP 384:Lcu8soPGPqTLSX0SyJzsFrRveJ2UocUB/PBhBRhOF8I40zFb+7RTJxiKlnacg9Ri:LKPTTQ0A5R2ZocUJZhcF8I40U5DUc5ft
- TLSH T1ABE27D07717AD6E9FA31623101099258F76BD00B7D2D0F82346F962ABF3F67044BC666
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
106351
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
code
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
text
Size
20KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=14, version=7299,
count=4, id=1, productName=Unmarked objects,
count=2, id=4, version=8047,
count=6, id=10, version=8966,
count=80, productName=Unmarked objects (old),
count=1, id=18, version=8444,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
file_id.diz
- SHA256 cd11ca6033fcc76c1308f06855a3d12b05c08e7c23c737d9c10d54dc80901d13
- MD5 ee64f79c4d1d9d7a821b382b24937255
- SHA1 84039c19c37211625d2e888a0904d023013d77d4
- SHA512 384608f5ac2a8b84d84ec8b4c1c3a84e03ff5f01fb85169a0e01d19f6c27379f4ce439a85f248fe7ed998b8aae8a829bc02c1be0b35c62643acde7f647a3eea8
- TLSH T1B8019A088D26D1BE6B32CA24C4A46069F19E740F32786BF1B12E2706AF7B772425C175
- MD5 SHA1 SHA512 TLSH
tmg.nfo
- SHA256 f96ea9706fa2e3e35f4ffaaf0fb0aec3481cc0770ec49cc936ec09d9361bcf74
- MD5 1898bacadfa6b76cab63d23008687b4b
- SHA1 9fcd4a9f413fc6ae05bbac45417709ca9cb6dfa1
- SHA512 223c3cc6e473d1e1dfc5d9e6d2ff8734bd8a81e2f87f09705a586a38069e8b5e2a855a0d386c847be712bec412ebda97ef633061da0553a5e6d8455a149e199a
- SSDEEP 96:PMqrab+fzMTQMITmaltpiKlnhQcg9Nh4SBNBUoCIwIW5w4j+E:kqWb+7RTJxiKlnacg9RN3CIwT5w4j+E
- TLSH T10402060B653BEAEEFB315B6041185198E37AD00F79380FD0306F66267F77A7505AC226
- MD5 SHA1 SHA512 SSDEEP TLSH
tmggm118.rar
- SHA256 1c114c2eab40d06b4cb3456d5a0826df4f12c1b5d34fa87ba21cf623bbdcf310
- MD5 fd33235a8f7b04358c7239da22de51a1
- SHA1 eda331600efe6332bb779eb06768f3168d5fd7d3
- SHA512 58571f019d484390f67f3d4c1ffaa5fd913fdea6406d4a18b2158dacf4df46ef1847243298a1e6ecb59f3737de97a6d56fc6fae04a53e65f515d11f8fc138caf
- SSDEEP 96:8BX8j8ZnpFa7Q9dWqt/SisYPyqHHieoyTeesx1jyDNl5hiFovHQGggskrAZjRKT+:8Bsj8Znpld3/Si5yqigTEx12DNxiFo/c
- TLSH T1D8B19F98C9C308FCE5AC1926AE8EC410E362A021BFBCF05B4D064BDD49F5681957B57F
- MD5 SHA1 SHA512 SSDEEP TLSH
keygen.exe
- SHA256 82e026c5adae6b0f2ad8533cdc92efa9b9bf25843cdd836dd57285d407348502
- MD5 deb37766a5bf7c8cdec8e284c44c72fd
- SHA1 44b7b23f6a2574f6590de9c160a397d2698f9b29
- SHA512 3342f8b290182cb97253df5a1099243c28de0d1b16d81b762ee4c646b07ccb5f3fc77bd04f3c9b47433593880567397394929f8152abbf0c2a540f51198c34af
- SSDEEP 96:N5ZZZ8xVUc3RoDzNpjgDZ3WPzBznJz6MR6RtXN5E99WRHg:N5nMmzNFgd3WPzB9z6pR75ht
- TLSH T140C11AA1D79191B9C4BC463809D63E1BED44865CC736C6118F60144E2BA1A5C7BCAEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
1
Entry point
29403
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
����t
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE