tmp | Triage

Sharing

General

Target

tmp
Size

299KB
MD5

b45100547afcf04161ad8d89607c91e1
SHA1

5fec8b07c5d6cc111aea5040ecc5722bcb3dbd0f
SHA256

1132f94ead2ecd99a219680da469d2b34da266b31a6a34aeb3fbc3dd3ea07b14
SHA512

99df51045411b4a94d97fd9649bac1997a727fb73509d1d611790440b0d577d8d3443b9d5ca05be647116d87f6c762ef287af7c15383771b2f0e6e7d268bea09
SSDEEP

6144:ii603WckymOm2AujVhi2CBqs6xeyAVOHooSmqN3SvKUaGu9rAGu9r+v:r1Zk8BLFsdUmpSvKUSuMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ