tmp | Triage

Sharing

General

Target

tmp
Size

582KB
MD5

046b5dbb1b40aaead074341a786a84a4
SHA1

8ee79dd1e9700fb469744f28f56cfd73a5127c90
SHA256

e1edc5a0751cf279170231a515e3cf890dff0dddc5a1a14bce6fea5eabf30246
SHA512

48773d6daea58ec0e1276c2179a42cf7e951a8489353585f1ecc2a1387d889f1f4b152f30a47295ad7d7640bf739a2c19174541887be8fa56faebddc63baee2b
SSDEEP

6144:G8q6ScpzPv+2Cw0N9d63V1q4oHRFGfWO79WiFCBp9cNSiIem91P3JgWDUA8:G81fp+Hrw9Wo66NBWiW4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ