tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

441KB
MD5

1188a953c9f36b374ca3714c9de1763e
SHA1

8ed3947a1e45f67263327a020035765965951949
SHA256

20d45ab8062d59db6229e293a604f37e2760519894d07380288f0f8f5e2b5c95
SHA512

61a856720237b95295d4bafe295bea107d7bede4b0f498c43c6d344af1483ddb788d7431f08451e86bb6c8e60a74beb9e7fdaa831b6405b3a5fe3f460ca5213c
SSDEEP

6144:p7kv6HlSjbx+NOspNKz9l2jwawmz4FBFqF1V0KrKi:1TSncN/0T2kawmz4FBoF1V0KW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ