tmpsednx3lb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tmpsednx3lb
Size

216KB
MD5

2c42c0b5c1ac914b01044be0307fa8a1
SHA1

1afde375573774216780f6c68d099d2da7b98ddb
SHA256

9bf7689c21c49bbfab7b4d4a26ff66558a3377a8e504f9041a9e5665dd5563ef
SHA512

c01bec8f90786a198a9ce0b21c16da500a55c2c7ac16b31829c011d640fb9f8f98159244ddfb0ba2870b059a42d5ab1f5a2a73fdda2b50e7d5888a4cccb1352c
SSDEEP

1536:H9SZahC7x/NE1b6I505O0qxXrPffdxrzr2rYcoENY+Ufi1UbaFWrl:Ih9N69jfdx32NY+gdz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpsednx3lb

Files

tmpsednx3lb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

PDB Paths

C:\Users\Administrator\Desktop\Outputs\sZGMEgujByTfnzp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ