tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

608KB
MD5

fdd25eee7ddd13861e4923ca95ccd013
SHA1

75a86c1f6b5cc400d2cf22f1a0e127088ab56fd5
SHA256

61fb2d927a05de9597cc9bb4bf6e1b40dff199b63c41414f957d8bb42d47582e
SHA512

c8092f81a0d5c237bab53a31ae27082b3136763e236316236345c3d996531d4b82a10cfefc4db841f938639f3232880dc90688d6d6082f7020b61135ad28526c
SSDEEP

12288:H6OQAZfALj0oxqfb9dxdsT6cdS8J6n77ie:yjofLbc6ElQn77D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ