tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

900KB
MD5

b2380b115c3ea3533db6e8af8b14be5d
SHA1

2be0b7a3317a3cc149f870e6d43803675feee353
SHA256

37ccd804b6ea585b29c2af2b39eb6cd0b8569b5307d7fb9bf2e7eea38554785a
SHA512

780980dc1a26bc2a869bc02a8cee4f03293b551f64639f7f498017dd2c4860952d4d821a2d6d32f5bfed4084ba97caeb64543528fe0dc1452fb245110fa1ae15
SSDEEP

12288:7FfQmPhv6dvWEAnnPlGHB5FzTT5T3XwizYdvY1a1bwmnu5Iq8Fy8aZt0Po296i2n:7KR5nenPlC3RTdrgdvY1uniWFa30tlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE