tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

508KB
MD5

f25c3847c5c2f22835f166d9e0855905
SHA1

e6fe4597be4e7fbc358eb79057b7b7bcc3ad3b29
SHA256

ffb16c9e23092b4194b076ed1a8fb847e65051329b025c99ff06088dd760e5a8
SHA512

ee0a5037ce4f5d0427858fb9b0229f43011e88169d95154cdb2f3d27ec0728d7d9c678599b8a5baf540d09a256f06b7a92e03342bdc3dcea16eb4523e96f8629
SSDEEP

12288:siOXo8jJM7w/rool+djkptlC7HOx618Ssglty6B8nFJ6B:zfBiH+djLao1cwOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ