tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

17KB
MD5

b44fe85b858cf267cf083fc7b8e94801
SHA1

4b47b35358c9cdcfd53d108ed540747e168c4e45
SHA256

e89f34a454f6408e917e6792552e74b3b32d40114cdbf362e7bd982fb35a72e4
SHA512

7fa780558cd6e12fdb20b5998cea6f9f1dfba123d3c79c9997ea28836989c64c0163af942268b46c055ec78dbdf1564cacca80564341e94be4a2af581b07c6b8
SSDEEP

384:YdlWnGBMH3vsfNnpCKgLf45WS3Qf10Ce887q5s2L3:YdlW8ufsftbknSEsU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ