tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmp
Size

27KB
MD5

97da6c64a0afadd79662ecf340ae7da3
SHA1

0651b2d4ba2bcb04ffd8c9382f5f0392c716a547
SHA256

81a8f6f129d5654e3d167b4483ef760c5dffde407ec8effc09e7c67188f559e3
SHA512

a60466060713f0e33b9425d625ea565be1e31b1bea0ba28f334d47cf1ee8d1e707c545bd40705ade61ef746ad2b1dd1e104608d376fc3cd907af8c89542e0372
SSDEEP

768:rEHP8zdTlxk5NkkkkEvkkIhswkkkkkkkkkkkkkwjHbM41v1cbVYqgm3Hrdc:rEHP8Nl2kkkkOkkIhswkkkkkkkkkkkkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ