tmp | Triage

Sharing

General

Target

tmp
Size

109KB
MD5

87c75be0b9d3b976b783825a6da125d3
SHA1

55d8066291ca17512f48eb27c066168540004bc4
SHA256

57d8e4fe051598089811d8f04b482f010599cfe3eeb07f164f8888b1ae72d634
SHA512

396d589213fcf43ef4ee8b63d8087a93eea76e9abb2b06b6660388bf10563104d8d1d890f0d7f76bb910961f53bc1faf079ededd79368411c37463b683a9f909
SSDEEP

1536:RYaDDbFzTTtybc+yN08znUd9EBZobiDJ5y8rPJ1qerzpatHz9egKf:RYWF0bsa8UOB2biOIP3WE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ