tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

590KB
MD5

690bca3a7bc4f216912a93d45a8fc99c
SHA1

a41726e2ed5a428aac1f33033bfa8ad43bb2a95d
SHA256

f25d6018d3bab1f7651937b7b8e618979ea3c45b06e42e3d93e8b59cac9d46c3
SHA512

ec18fae6bf2a3ab648a545ef6c5fe8f99ed87996c99671015932ec4c1f47d9b83b7ac552177f7d9975dea89c7205c3dc22809f56a90551e75b6a6ab6dfddad1c
SSDEEP

12288:bLqtZa+LNl7hKWWpQjdu4nmwz3WogzQwUjvrodJNi:b+tA+RE6s4nmwz3UzQno1i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 521KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ