tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

2.1MB
MD5

3799124003ec804f53739f1588ebf3ea
SHA1

32483e2546ac0f944d9e403e4fc2d491723359cd
SHA256

b48651ef5fc89df2a887ef5751256ec6762655839bbff9961af05cf2febbbc4d
SHA512

c44ca2e8609e7e97d634abd0a44ead1c6e42eda16e902bb8bf6bd9a001fa578272e3476c86952d9ef446165dc5e1019f08e3cfaf02308a887a5b6dad385f3962
SSDEEP

49152:LMD/1tXWN5TRfk/GNUE8eCMk+biAo0nCoQsUT6ztQ8mMJY4Te:Lu/vmvTRfLV8rMt+A3LA2Q3N

Score

1^/10

Malware Config

Signatures

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:cf:eb:25:b2:64:8a:f4:71:77:cf:cd:5f:02:b2:b6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/06/2020, 00:00

Not After

11/08/2023, 12:00

Subject

CN=The MathWorks\, Inc.,O=The MathWorks\, Inc.,L=Natick,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:a4:3b:6c:f6:75:b9:d0:69:07:ec:fb:82:d4:6d:db:0f:30:6b:75:39:2e:bb:24:37:91:09:5a:d5:e1:a7:1a
Signer

Actual PE Digest

90:a4:3b:6c:f6:75:b9:d0:69:07:ec:fb:82:d4:6d:db:0f:30:6b:75:39:2e:bb:24:37:91:09:5a:d5:e1:a7:1a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:cf:eb:25:b2:64:8a:f4:71:77:cf:cd:5f:02:b2:b6Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

90:a4:3b:6c:f6:75:b9:d0:69:07:ec:fb:82:d4:6d:db:0f:30:6b:75:39:2e:bb:24:37:91:09:5a:d5:e1:a7:1aSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 512B - Virtual size: 12B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:cf:eb:25:b2:64:8a:f4:71:77:cf:cd:5f:02:b2:b6
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

90:a4:3b:6c:f6:75:b9:d0:69:07:ec:fb:82:d4:6d:db:0f:30:6b:75:39:2e:bb:24:37:91:09:5a:d5:e1:a7:1a
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 512B - Virtual size: 12B