tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

315KB
MD5

0fc5e679a966381cc05917e6046da9f4
SHA1

8f9f53955e5732e955e8f5ff600ec519df94c161
SHA256

e387c71dab11c5648f482091bf4f6ddcc5da4e1f1235e311dac1f8fa818442c2
SHA512

4a06e46a0450c8b177d4f0d696ea329b160488bfacab8f1ae422a9208e94ccaca569cc37bfea1448e259568c802362f0bdb455f68f99bb8a7435cba5774e91d7
SSDEEP

6144:EPP55vvFpmmMMmmw3LLllLLZqRjee7vYYo2U4YRNNbKL4pTYdkhVoi4Fc+dVkR52:EPP55vvFpmmMMmmw3LLllLLZqRjdvYYD

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ