tmp | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

tmp
Size

10.9MB
MD5

7c3f38b97e96800cf0ed638b8cf78dc9
SHA1

81d2d45e1029d2b7a3e6b7f0009c56d728d311f2
SHA256

47786ac8269182bbed75a3762ad6552d7b7140950b3d4d7b52eeef01ba10d439
SHA512

a5adb0962855c4f8c6f6fd0f3e70b839cfa9eda5f663d2414b7816a9faa801c0fc4fd9b408967249d31ebbe45e6cb60a6f48c15b5e3db3d9fe9e05a92832dcb3
SSDEEP

196608:uEnq8ZpjgKiKYxkyIHQVipG19iz6gPOCHTv+q8Qt6IwHSd5uT+FzWQb3VcnMlD:9q19DEuM3POCb+2TruT+EU3V2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:6 windows x64 arch:x64

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: - Virtual size: 31KB

.rdata Size: - Virtual size: 7KB

.data Size: - Virtual size: 12.6MB

.pdata Size: - Virtual size: 384B

.00cfg Size: - Virtual size: 16B

.tls Size: - Virtual size: 16B

.text0 Size: - Virtual size: 2.8MB

.text1 Size: 2KB - Virtual size: 2KB

.text2 Size: 10.9MB - Virtual size: 10.9MB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: - Virtual size: 31KB

.rdata
Size: - Virtual size: 7KB

.data
Size: - Virtual size: 12.6MB

.pdata
Size: - Virtual size: 384B

.00cfg
Size: - Virtual size: 16B

.tls
Size: - Virtual size: 16B

.text0
Size: - Virtual size: 2.8MB

.text1
Size: 2KB - Virtual size: 2KB

.text2
Size: 10.9MB - Virtual size: 10.9MB

.rsrc
Size: 11KB - Virtual size: 11KB