tmp | Triage

Sharing

General

Target

tmp
Size

621KB
MD5

dcc16897ff13b0c872b5123d54e28f6d
SHA1

51d9929ee5147afb1bb770e42525d4f481a0e7e5
SHA256

e41ce47cf174f8b3f909756c90495e990b4f5550da4bd7e1a6b5ba50ba0ba9e9
SHA512

b92418967396bb3fc63a8f9196f552c1335253c0a93f842717b77a4c03b3f0a54b22cce1adc46d8fe729f29c594eb71544f75463d846c453dd3ecd9cde89cf25
SSDEEP

12288:AzfqBuxakFy0le6ygZS3mUcGtk9StWAwuUWKz5wasrz12:AT6Caki69+c4k9S7zPQ5wB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ