tmp30d7so35 | Triage

Sharing

General

Target

tmp30d7so35
Size

993KB
MD5

5602ece271f4968d46c5e8be45eb8341
SHA1

1e7f2f1c6c08897965218fc2eb1707364601fbfb
SHA256

ced23104253e55e011dd15862eec275352406b0541672bb9bdace10af2bf6a52
SHA512

c11a35bc1abe62b171b3a9421c7d017a70f2f95335066dd8dbabf1bd5c2dab3d4ea4396a2f417b2b2bf3f3d6ac6d29ca6e80369346060ee0c6644a95167ca324
SSDEEP

12288:f2QRXDD1yed0fsU4GSWaOvPESGj4s32xEdRCS7o7VuiC31rf3plTzW0VOO6NqnD9:f2Q9NXw2/wPOjdGxYd31rf3p97mzhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

tmp30d7so35

Files

tmp30d7so35
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\UNKNOWN\Desktop\DeneyMAN\obj\Debug\VisualStudio.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 953KB - Virtual size: 953KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ