tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

596KB
MD5

eb0db02860c3a9eaa1aa0b55c365820a
SHA1

7caca1d679f032e3d9080abc4a74e1f1e4d60f7e
SHA256

8d800fb136b4e8e08ddacec182971201f121860e309e1dccc57a1cf7eb16f2cb
SHA512

11a55fd4d03da2fdc8fb4386ec8ecdf0ac32a29f5f204e34ddf9561d897859f75ae5972f8b275eb83853d4568bac88ac8f6b14b63861085356c0695e633435f2
SSDEEP

12288:xP7V0w0Q0E6jgP0pvXDYe4+XqaTC9iktxrcwkhSgFTSO2EDQ3y4GHqf:xP7V0w0Q0E60q/DB6au9iktiSgc3h3r3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:6 windows x86 arch:x86

7f2ad773523beff11f9bb19bd12835bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockExclusive
ExitProcess
ReleaseSRWLockExclusive

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

user32

GetDC
ReleaseDC

Sections

.text
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ