tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

581KB
MD5

5986ff03860217c0244688aee31a3eb8
SHA1

bbb37d6f0278452ec1dd7bed4b1a6cc6cdf896fa
SHA256

801f5ef1e0281c154e61375b7ed880bfd7d28212f94cf54a4eed16afe417baec
SHA512

75a3ceb30f2fc866757162952729ae47b18c2da189410d6ffbfb1637bdc739845606c4375f2bf40637002830a688dbbbca69aa34f2576c30b080bd20a01b45ed
SSDEEP

6144:WWyIgqgWWgf9cH6hqxLCtqX9ARbQGtkUv5dOqBSZi7rRyEpwA:WbEWgM6Bkma2AUyE

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ