tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

155KB
MD5

0d34823c0c21308675bb9803bc476a82
SHA1

1163596559cd2adb0ba5c0b646bdf43aa77b3ed5
SHA256

b0952a1ca94c0a63707b8e4b09157d401f0952a4a946b1185c5d341ac2d03192
SHA512

b6d62089287b7d165ff0b658055a7be098989965e02649db32826750c4cb8a3b701fe1780c07214ba6d2432348bc05fa15c2bc8a12e5dbdbe5d3f47e447045b9
SSDEEP

3072:tXNIK1EfPloYzSYAu7qUBvyWWWWWWWWW4tyT/WWWRoloUh6AurSzXkdhgW:48+BqWWWWWWWWWWybWWWSlPuak7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ