tmp | Triage

Sharing

General

Target

tmp
Size

1.7MB
MD5

cc81083e6f7b75703471c22dafe03dd8
SHA1

c6cf8a52e9cf355b96fdcfdee31686b24b0edc97
SHA256

3a5948d61ab45974439353be5319147858e4933e54e73bcf69df9dcf082fce08
SHA512

9fe26cc2f0011ff3ea331d98ee9e1bcd6e534e652291e69813c613f2c5e4ebce277f14ed9be890edf89e267fb0b57d881579459a4d1be7c1a245864c2e846767
SSDEEP

49152:ODuIbwDYFT4zKrImHzQTzfNV9MS72D2/1o6GAGvF/8iK52:m58wICzQXNcXDM170ai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ