tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

589KB
MD5

0a8f8a168999ac1549335feb6ad87cfe
SHA1

589dd8bf022830ca9a42944deb590706668165d0
SHA256

d73eb26bab461b1bd630ac8ecf0c53a22a9229436b4251deeef100d60e545541
SHA512

b03f67e8fcd8f48e9cef96aa6917cde14e4596ba582105e0be5b36c60944b72f13b2b5e0544d622550f62a18f87dd179b2b38713bdfd29416e3b995b2eb68cb1
SSDEEP

12288:xneAeNumB0nhytnKhnF3of+giexDVlxq4CxibncNoerzpy:BFyznKX4f+6drmibcNh0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ