tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

28KB
MD5

41e044fa38ac7b2410e5217b97a2d7b0
SHA1

3f44638f360270ad3c660bc119665ad5b15f1e06
SHA256

b14ae630d93dcdd468785b11d33459408e7726e48e969091ea9bea32a46fc91b
SHA512

ef28f8f7feb32c91394ea8ebbe650b9d5cbb5ea9b696ee0d256cb564fd988bfe5322a8af55749afe0d040481c697992c557f85946280fd75d96d30293b883383
SSDEEP

384:ti5MGH5BfxVgPIjlLBy2uGeJvBOCkbzNX/ff9QZ2j96uS:4Cg5BZD4kbzFeZ2j0uS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ