tmp | Triage

Sharing

General

Target

tmp
Size

128KB
MD5

a7492033b7ba4a7f8b422c067655412b
SHA1

3dce8de29aa5ed020eac34388626ea4d4435aca1
SHA256

64d6144090f31a1c763658da19e33af943da14363f0b1fd9dcdd5e7e4a914198
SHA512

b627606d286ab0fd012b1841f6b31afff896a7cd08b7c7bff6119a6eb734862f435b1ec1f5bff8769d927158eaecaa3e3df4c7cc245085b7e6851aecab86bfa7
SSDEEP

3072:0Frl5RaBaz+oA9IxnN8GeepiiepFv5DmiqyN+ZJNl/1iZ:0BcBaz+oA9IxnN8veMdpRTAZbl/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmp

Files

tmp
.exe windows:4 windows x86 arch:x86

eed9182d328e7e994d0c62e9280718d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA

user32

wsprintfA

msvcrt

??3@YAXPAX@Z
realloc
free
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_stricmp

Exports

Exports

Ip

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ