tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

5.0MB
MD5

6e92ea25b5dc8c1eed11f21e79f57514
SHA1

2c136294f5a9f947e7110e81d0097aef26df3971
SHA256

4f3545b978f75751d9a619fc80e36231bce53481e92876b7536c10b3b19b856c
SHA512

f9f522ce9797cf1e90cfcde57ab755788c9ace5345004fbdcf5f6d11a6252d68d014e0dc7877a998df418c69acaaa433b8daca302ed102c9376d357874809402
SSDEEP

98304:sP72ZBCL1zCBIMGesWwX+ZVLVzArOSqeDalc6dtcpp:sP72KBq7Xxc9BDalVe

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

08:94:a1:11:8b:07:2a:65:46:75:49:a4:f7:77:06:fc
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

11/08/2022, 00:00

Not After

06/09/2024, 23:59

Subject

CN=暴风集团股份有限公司,O=暴风集团股份有限公司,ST=北京市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:7f:b2:76:ee:3a:9c:2f:e2:16:3c:58:f6:57:56:40:87:6e:f3:f6
Signer

Actual PE Digest

2b:7f:b2:76:ee:3a:9c:2f:e2:16:3c:58:f6:57:56:40:87:6e:f3:f6

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 302KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 561KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 94KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 825KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

08:94:a1:11:8b:07:2a:65:46:75:49:a4:f7:77:06:fcCertificate

Extended Key Usages

Key Usages

2b:7f:b2:76:ee:3a:9c:2f:e2:16:3c:58:f6:57:56:40:87:6e:f3:f6Signer

Headers

File Characteristics

Sections

Size: 302KB - Virtual size: 692KB

Size: 561KB - Virtual size: 912KB

Size: 94KB - Virtual size: 532KB

Size: 825KB - Virtual size: 1000KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

Size: 512B - Virtual size: 4KB

.data Size: 349KB - Virtual size: 352KB

.adata Size: - Virtual size: 4KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

08:94:a1:11:8b:07:2a:65:46:75:49:a4:f7:77:06:fc
Certificate

2b:7f:b2:76:ee:3a:9c:2f:e2:16:3c:58:f6:57:56:40:87:6e:f3:f6
Signer

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 349KB - Virtual size: 352KB

.adata
Size: - Virtual size: 4KB