tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

5.0MB
MD5

794d3f534cbc5bec7a76dc3202068ad7
SHA1

0952a6a74d676d1f1abf6fc844b18d9446d0b844
SHA256

01a12325b85dd11c8339dcfda27f30c198ec464283a78d7ac48bcf1753c2d6ea
SHA512

9f14c6139e22794067668f346487eab945a2d7d8c14e59b3d6a0028714b52d2e2b3465c273b6747d13181e161fbff2237a92fcbc1b80604500166567194c9174
SSDEEP

49152:peyauztjYdfem6Y9hB+RbmJdHJ7dKbmp5fTd2hF8L4uLA/jVDuVuRyY:8yd9mnHfXd7nl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

618184ba15a7bfdd3b31c115885e42ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ws2_32

WSAGetOverlappedResult

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

ntdll

NtWaitForSingleObject

kernel32

VirtualAlloc
VirtualFree
CreateIoCompletionPort
GetQueuedCompletionStatus
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
LoadLibraryA
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetProcessPriorityBoost
SetThreadPriority
SetWaitableTimer
SuspendThread
WaitForSingleObject
WriteFile

winmm

timeBeginPeriod

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 211B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/18
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/30
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/43
Size: 647KB - Virtual size: 646KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 512B - Virtual size: 28B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 512B - Virtual size: 38B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

618184ba15a7bfdd3b31c115885e42ef

Headers

File Characteristics

Imports

ws2_32

advapi32

ntdll

kernel32

winmm

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 97KB - Virtual size: 182KB

/4 Size: 512B - Virtual size: 211B

/18 Size: 162KB - Virtual size: 161KB

/30 Size: 158KB - Virtual size: 158KB

/43 Size: 647KB - Virtual size: 646KB

/55 Size: 203KB - Virtual size: 203KB

/71 Size: 75KB - Virtual size: 75KB

/87 Size: 512B - Virtual size: 28B

/102 Size: 512B - Virtual size: 38B

.idata Size: 1KB - Virtual size: 1KB

.symtab Size: 304KB - Virtual size: 304KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 97KB - Virtual size: 182KB

/4
Size: 512B - Virtual size: 211B

/18
Size: 162KB - Virtual size: 161KB

/30
Size: 158KB - Virtual size: 158KB

/43
Size: 647KB - Virtual size: 646KB

/55
Size: 203KB - Virtual size: 203KB

/71
Size: 75KB - Virtual size: 75KB

/87
Size: 512B - Virtual size: 28B

/102
Size: 512B - Virtual size: 38B

.idata
Size: 1KB - Virtual size: 1KB

.symtab
Size: 304KB - Virtual size: 304KB