tmp | Triage

Sharing

General

Target

tmp
Size

935KB
MD5

bebe3cc434f6afdb0f0cef4f13b78aa3
SHA1

b64b31a530a6308c636c6aae2852986182971017
SHA256

6f1c291cb4ee985a93a6f4b1c24b9f6e479149f074bc9575701f7c9793748550
SHA512

8d0a961894fa2782167d93625bbe51ba56ef328b21c754e9f20523c08cd934a7f955165881d8f5d9a2a7a587fcc59ddf6f821eee3b80b1a25f91e4f94a41c3a7
SSDEEP

24576://0JW4NPRsBu+SNbj0nqVktuQu3GYfpBhtD/:TCX10nqVkaWY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 932KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ