tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

9.6MB
MD5

e48ff3ddd57a693c0323b8e6eb8d2f1a
SHA1

489baf622618ee3676bc64a7f01c8443a6a72532
SHA256

41d66056bf5fbe7392e30ecfd235331d0891f603a67842083f552126dcae4619
SHA512

872dcf909586d947a872f95e8ba35271831c237ab7099092433508c715c9482fbf8a094b8ebadd003045813fa6492961d296a8cde9ecfd1bebe43664f555a56d
SSDEEP

196608:UfmfFZcLe1x7e9ylxP6fur2w6BifUcRjQMa8dJG9g+SQco:UQZcLs7epfWfL5QMa+JG9gmco

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ