tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

629KB
MD5

35211aef00b84e9ef75c77adaba99bb4
SHA1

ba860c85e19bd9080babb972e6f71c7753a83185
SHA256

7985fc1b93bb58d6234b11a3efe2b8e6430028dd84bf6f81e18642eb3d734969
SHA512

3da5d26ca702b73a735cf2330ffb6b51d4b6ec2da71e9dc88945d286e52967064a7be4df5a6fae0193418e25b8e86dd8274110fc60e900e6a12c3ad855678469
SSDEEP

12288:EIF7Pm3CIoORtoqVHuBzW5jbmOclt3uBzCaQcReWwPOK6CBhalPo:E7bo8tVHu5UyfuQiYW/K/rcPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ