tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

5.9MB
MD5

9ada27d5aaf078c8f48ad6bc8a46a53c
SHA1

ca0189f6208c36190a06b2de1cca3f37f5f7ac67
SHA256

780d5a1fe3bc151663344a8eb49956a7d455905b1aee1a1cf580be358b5085ba
SHA512

952da5bcdfdc433893068c90cb4699ee83d8fbbf0b771421cf9871c9a383d0b264d69cd2a56181175f1d104deaf4a62a954880e3d383e02f90100b5c8b42ee74
SSDEEP

98304:Q/SYQlgT7ooKkY8H/ACF+68XAZu9Xbie1O6r8CRV2vI/AnsX3qEO:6QlgT7ozkoCY67aLHOGHV2aOsni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\_AsgardServer\Launcher\AsgardLauncher\obj\Release\AsgardLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ