tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

3.9MB
MD5

e6a5cd9384ebd625814f48b65087f14a
SHA1

539e925a218b4bdf998b1e6c556cbd2fe7e8db99
SHA256

b48c95634f260caa0e8f5a60ce36239de182f8a2f34d484e184540a77b482770
SHA512

c5b85c9624bb87048ed2efdf175abec32a515ced072445ba8f86249d571e2c37ff299560b7041bd1d2588f315e041e137f7bf10c8142be8d1160bca0f3201eeb
SSDEEP

98304:Za7OqDkYAHZKYimBRnPEmhG5AHZKYimBRnPEmhGn5or6n:wOqWHIYii5PEmhGOHIYii5PEmhGn5om

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ