tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

18KB
MD5

ac2d374f5f8f9e60c6795e819e1c4d79
SHA1

aaa5728d514ebf874ee02be6f0eee985fb24f38b
SHA256

3e2dfb6c62e5674c060400c6baa7e569d60f390fb187dd380a1d6663f156cc37
SHA512

25910a3a4ad004b254a0c24b3ae6079eaaedbe524348f8c058df865a64d31f4d7bc0e7266198f1e2aef60558b0a9f23454c6f2bc91ab928b7e06a2ecc1525027
SSDEEP

384:6YVYVMIL/FM7DIbE3KIm8VzZKG6wzbaZvJoHGmGovy8ZpH5:ZYVtL/wIrIm8Vzz6SbSvK1yiR

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x64

Code Sign

c7:60:0f:99:45:e6:e3:ca:cc:6b:ca:23:7a:0a:5e:a5
Certificate

Issuer

CN=Ching Chong Oracle,C=CN

Not Before

08-02-2023 12:09

Not After

08-02-2024 12:09

Subject

CN=Ching Chong Oracle,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:59:d8:60:b6:a5:17:0b:e2:9d:99:a6:93:cf:49:13:1f:60:ac:5d:04:a8:f7:75:f0:49:7a:72:8a:f2:fb:2b
Signer

Actual PE Digest

d7:59:d8:60:b6:a5:17:0b:e2:9d:99:a6:93:cf:49:13:1f:60:ac:5d:04:a8:f7:75:f0:49:7a:72:8a:f2:fb:2b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ching Chong Oracle,C=CN

27-02-2023 09:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

c7:60:0f:99:45:e6:e3:ca:cc:6b:ca:23:7a:0a:5e:a5Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

d7:59:d8:60:b6:a5:17:0b:e2:9d:99:a6:93:cf:49:13:1f:60:ac:5d:04:a8:f7:75:f0:49:7a:72:8a:f2:fb:2bSigner

Signature Validations

Verification

27-02-2023 09:32 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 11KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

c7:60:0f:99:45:e6:e3:ca:cc:6b:ca:23:7a:0a:5e:a5
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

d7:59:d8:60:b6:a5:17:0b:e2:9d:99:a6:93:cf:49:13:1f:60:ac:5d:04:a8:f7:75:f0:49:7a:72:8a:f2:fb:2b
Signer

27-02-2023 09:32
Valid: false

.text
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB