tmp | Triage

Sharing

General

Target

tmp
Size

1.7MB
MD5

b0cd0472bad1ec1cd55f4583460bb232
SHA1

77b944827939e9ed70a36ea0ba6aab93774d1f26
SHA256

2893876f26c73d7dce1828babf03dfd9551c3d36a7b8de144daef87d7e1e102c
SHA512

f7312406429d9b72dfdda32bc88cbd6a4dd0264d130dcbf3186250def88e73dc45107db83fa24432bfa04f6de282a715dbccd30cb6daac8a0032e3c208ac23d8
SSDEEP

12288:wMsOUCuN1lXtsGG4iDv5Gap4YWUNhL8ULWjDWzIT/PLysbgK3c8hT2s1NXk3QObF:wbybOjaQP5gK3ci1ObuyfdZBOhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

yig&N
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ