tmp | Triage

Sharing

General

Target

tmp
Size

136KB
MD5

042604de6fecdd1e9146ac5a88eb3713
SHA1

f72f2527619971a228307387f0f4a746b8365384
SHA256

df36f489226e5350f569164c26dcf0a58269651e0a7bc2a03159f4d2722c0763
SHA512

0ee6327d037074d2b4ff8977c508bd576138a2ca463602fab5c73c9a70ba349a1c70ee22375d669fa49721a3e7b74556dd4f6304bd136986d06d82486b99e462
SSDEEP

1536:KUKaDOw7oQhhKBf69W3gr+/XPhsAch6crk227Q1udoVW:KHwvmBfrwrwa1FkJ72AoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ