tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

420KB
MD5

756e4994d859fa8ba5d0adb8b4993edb
SHA1

2c8eeaa64edff4fa87bc683c58dd2f89c9350202
SHA256

6e46cade0f29cc3fe7aaef0e6559da1eaa4bc75fa2075d04ec26f25978612d33
SHA512

c5551a01aed20631890fca5b58bb4db92f28c582a48e3ae8a582f3b4f4a0014d881665b750eecd3adc7befe09e1e0fe86e2fa8f5daf306d74bc4d6f3d6419af4
SSDEEP

12288:YnaInAlgFlYcknHQEHONAKgiQPtcrVypj:YnaGAlgzhknHQEHON5PQFce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ