tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

1.3MB
MD5

e47522aca5f09623e5c9a25165392ece
SHA1

c229a65435db53800c8f8cf9700a26b288f26194
SHA256

1178fdfde9ad0b787b374bcfab2c9a0fe53c5cab03c07b997795da6067f06535
SHA512

e3781a519ada61c83927c060e09f8a6c5ba90b65dc652e380f819a193a60c08c306e23aeb941d0545a67a0fe3611ec5909ed5ee518be431ad35f89d71ec3b965
SSDEEP

24576:/cv64AI8P5P6b3nQ2lv3+zRIeQRWjqGw7ReQ6:/cv9A2b3pBIKpwwReQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ