tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

108KB
MD5

c44936f16c1ecaee6198841d70c7b27b
SHA1

47e91f0eee549a616544fa21966ae0fc3ec95267
SHA256

44e45a488c87a5081f03439c7707bf3b689f9159fb0e4a4c69f426607da7771d
SHA512

3cb40d4d7fdcfc08dffb516d902c90105bf35045d8b67af5e5c66ce111a6ca967bb435c07dfe2b866ddb126f8a2e6cf72a4c308d8210a1798e5aebfe65031437
SSDEEP

1536:nhY9kgbZkdHCF7hcVsn+GArKM0afTvdZNPB9tIxpDXnznmVdm/g/jZv:hY+85cF7Bd99tIH3DmVdm/g/1v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

6ad3e0bf2f839602c87c445c99fe20bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiDestroyDriverInfoList
SetupDiInstallDevice
SetupDiSetSelectedDriverA
SetupDiEnumDriverInfoA
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupDiGetINFClassA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupQueryInfVersionInformationA
SetupGetInfInformationA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiRemoveDevice

kernel32

HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
GetStdHandle
WriteFile
LoadResource
LockResource
SizeofResource
FindFirstFileA
FindClose
CreateDirectoryA
FlushFileBuffers
CreateFileA
GetLastError
SetFileTime
CloseHandle
FindResourceA
GetSystemDirectoryA
DeleteFileA
GetTempPathA
LocalFree
LocalAlloc
MultiByteToWideChar
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetWindowsDirectoryA
GetFullPathNameA
CopyFileA
SystemTimeToFileTime
GetACP
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
RaiseException
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ad3e0bf2f839602c87c445c99fe20bb

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 32KB - Virtual size: 29KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 32KB - Virtual size: 29KB