tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

740KB
MD5

6539eee7acbf730a855400dbec2739e8
SHA1

3112518e06892f5338b0fb95006e424b0e170a60
SHA256

a7076178b4a5b5092b6d860ca5591e2d6b426c42ef410be475518ff191d2907a
SHA512

e62c2c22a7ff63b620047aac87ab87d116c8656379e6b3827ce29bf9b7428047c9ca49eed8d73c16dd3b9b79a08a0db56c2557048d824838655ba64641119510
SSDEEP

12288:GkUMtPwSgnVH/JSqF4UoPO5dpWus+wnopixSZig7GhlXR3KjAYC5:GjMZuSy4U15ZinQCxJ5

Score

N/A

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:e7:41:84:cb:33:96:70:e7:f4:f5:71:2e:a2:85:22:31:7e:f4:6b:a3:7a:a9:3f:63:5e:67:97:df:48:a4:99
Signer

Actual PE Digest

0d:e7:41:84:cb:33:96:70:e7:f4:f5:71:2e:a2:85:22:31:7e:f4:6b:a3:7a:a9:3f:63:5e:67:97:df:48:a4:99

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

24/10/2022, 15:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Kw%N{
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 657KB - Virtual size: 657KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3cCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

0d:e7:41:84:cb:33:96:70:e7:f4:f5:71:2e:a2:85:22:31:7e:f4:6b:a3:7a:a9:3f:63:5e:67:97:df:48:a4:99Signer

Signature Validations

Verification

24/10/2022, 15:49 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

K w%N{ Size: 71KB - Virtual size: 70KB

.text Size: 657KB - Virtual size: 657KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 12B

Size: 512B - Virtual size: 16B

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

0d:e7:41:84:cb:33:96:70:e7:f4:f5:71:2e:a2:85:22:31:7e:f4:6b:a3:7a:a9:3f:63:5e:67:97:df:48:a4:99
Signer

24/10/2022, 15:49
Valid: false

Kw%N{
Size: 71KB - Virtual size: 70KB

.text
Size: 657KB - Virtual size: 657KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B