tmpgmg1nz4l[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmpgmg1nz4l.bin
Size

621KB
MD5

624c57fa415b0f435b25fc7298bfa178
SHA1

9b7014045295f2900310189ec5d253bf4b058903
SHA256

a955da66c4fea454fc830bec547d560ea494e777259e38f195f7c7266fbd8ee3
SHA512

67d8ca9e2a3b130624775b5d841ce9766b69be71d448f129311b873dba8bd38a776a220c4db0a0ff68bdbae1722707a6e2f7107df4b479e4cce414bf2f3faee4
SSDEEP

12288:YfFhcjmqgx8MnCdgNNLek26HxnmywWMPPAzeVPGEfPY:EdZzCdULekhsFvVPTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpgmg1nz4l.bin

Files

tmpgmg1nz4l.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ