tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

1.0MB
MD5

a0228af8ddfd3ecff3d4b8dc9d863d97
SHA1

edaf892aa9474e9bd990b94c1c1638fc5f22de8f
SHA256

1c130d952d6a30d5110d95ab22e1e11995c24e4b7e1b79773b0b7419d8682664
SHA512

9b89f87855274545ae0beb774cb768ab8839617f97c9c3ca060f84c5c162d7e10d798797883c56f9248fa97f48a6dd3520e1348fbb000eb4b3506f30080663e8
SSDEEP

24576:dbWSbWjtLcSDFvYbcRwdu29so57iXUHTmGLvG/EvG2bWyb4w:MN95vYbxdu2r57LHTjudxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ