tmpyht_922q | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmpyht_922q
Size

987KB
MD5

f3251a151b899e6c931db32b70cbeb65
SHA1

4ef99c59520f8e712d43cced16c43b35e1c54461
SHA256

9ad69cbafa8e59f0073f8cdc3b5db93b264e36b5adce0a0e86d48d54ec4ff11b
SHA512

5f3c07d5770e9515bf1666089f8401bb5f13a9e33de47b5b946efcf0da2bf303feb17d347c56bb855011cbace185312a0ec80d86ed1f547f441696aedac38b97
SSDEEP

24576:2AK1NlBsszKcjDx8NVcBbrlst8CDINnEKCQES5G:pK1NlBGcHaVq+D3KCQR5G

Score

1^/10

Malware Config

Signatures

Files

tmpyht_922q
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 983KB - Virtual size: 982KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ