tmp | Triage

Sharing

General

Target

tmp
Size

554KB
MD5

4f4f3e19a67c65345953ccc6fe8da506
SHA1

c12367e37f7ff5a4b5ac93f05a0f4df05fce084e
SHA256

10945bdcab778a9240bd105c2bbbfdeaa97ae8fe7fa6dcc2ae10b23a189bea08
SHA512

69eae07116e254fcc90a649fb25e803f0ae01befbc4f603b812c98d3e201b713a5e629bf43e53f22d6d83eb313a8657f4a7e679068da0f92ea8974a9e0f25f3c
SSDEEP

12288:MotPplTY6RhKunCyMqbPstLeLzyN02OtTqBJKAJY8OOopcaXskvWaH:MoJTDE4CyMqbPstLKo0xtTOKA+GoHXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ