tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

603KB
MD5

1c354a83f81063dc75612a9a7bd51225
SHA1

a69efacbca12479674501b7c627702b02fa6713e
SHA256

d89ff8e9bac2d21d4ec86c47f05e1a569ce9578e2309b96aa09c4a6ef02b8e02
SHA512

8c71d53b45b206993a8828073558211b1804271575badd9ac4b23515f34cd7661443ab5bc3a84fd3a68e4fdd2f13fc8ea64aefcbd4fcc7740cac372159665291
SSDEEP

12288:36Q7PCFKYTzAGTrNXTOHqPW3f0CEtcxf6q3dounNSbQG+00:n7EKcrNyz3I21nwK00

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 594KB - Virtual size: 593KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ