tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

619KB
MD5

d49b62e60e0e42b43f32adf23acfd369
SHA1

a6fad4d81e7995c173121574cfc2dd3d38664726
SHA256

2e292710afe067f1065639192d5382b772babbc91d2a6a27fff41f8d110313ee
SHA512

c9af6214692ddf631d3a98fa016ac569f11db7db457c11cff573f62de3ddf12069eb18028913be150e4b816b9bad1266caa6e302027e3ccb9f9a52e7f41f352c
SSDEEP

12288:M8i69yqLNLx8+vRGitaX69HYUCKsihFmG20xTY6iKxYtsI8LVn:U6XZi+gv2tCjihgWriTtsIe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 613KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ