tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

1.4MB
MD5

fbc4872089a1ae2d07d4c4a347f1f785
SHA1

eae25481631ad074f2e79944980cd361f70ebc21
SHA256

b555c04d77d32c1f2ea95664991987b9cb7efb0ce83f1f07b1582651857bb798
SHA512

2512532170fb402f843180e82d5f885307cb53dad77030c10f4768988eeaba9a202f42da023934bd40ac18bfc6f556868d6e3c3105105a39840e21ad5f358c83
SSDEEP

24576:Syl2Iwpl2IwwnJ9x14VZkgqRcl6+jF+pa:/lWlhhMZRh61U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

42c6d65ae014198cee00f3a3ab065224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord585
ord588
MethCallEngine
ord516
ord666
ord667
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord645
ord647
ord648
ord571
ord100
ord614
ord617
ord619

Sections

.text
Size: 984KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ