tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

112KB
MD5

69092ed569d8725e1f458656645cc2f0
SHA1

0b7772d41c2bcfeea8860c51e2eee5e1897bcdf0
SHA256

c081342c28e25f52f84a92e2fa5cfa781f4071a8828dc5dcfc3321c2d991947a
SHA512

ada791f629d3e7673aaf5a48835c1837d2c61cc74796f640123d4f488a85f79068f7e3502c73bfedb3b4d2654dd5be60c9ee52ed1d2e873923468bb634213f19
SSDEEP

1536:5yMZ0RlybzbdJ4MP+s7q3PDkJmWgByNJGtan5qAoHk8dMJ4b8D:5h8CbMkQDk8BkJGtan5qNHk8d4k8D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows x86

30a37830dc4a914e76c578a9bb431006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiGetINFClassW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo

kernel32

RtlUnwind
InitializeCriticalSection
LoadLibraryA
GetStdHandle
WriteFile
SystemTimeToFileTime
CreateFileW
GetLastError
SetFileTime
CloseHandle
FindResourceW
LoadResource
HeapSize
SizeofResource
FindFirstFileW
FindClose
CreateDirectoryW
GetModuleHandleW
GetProcAddress
LocalFree
LocalAlloc
lstrlenW
LoadLibraryW
FreeLibrary
FindNextFileW
GetTempPathW
CopyFileW
SetLastError
DeleteFileW
LockResource
GetOEMCP
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
RaiseException
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyW
RegSetValueExW

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30a37830dc4a914e76c578a9bb431006

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 48KB - Virtual size: 46KB