AMD FREE TEMP[.]exe | Triage

Sharing

General

Target

AMD FREE TEMP.exe
Size

184KB
MD5

cf1561fcf6621a17ad783037c3a105c1
SHA1

662f68e81ef71278fe763952a5cdd959de53e9b2
SHA256

8a5d066d78aca1b96ca3afc1bddfe2d6936373d1ea02bce79ec15518b5fc9591
SHA512

06e96478e9141ddcb6e7779fd104dc9256a11ecdd76c758ce46760c74e90e32b1fbee6c0717d591d5e757e24492fefa88451e46456765ff92b3fa26ebe833c91
SSDEEP

3072:HCMT9szA4tOicW7t9m4WJ/OlsZY/f2fwe1SFA1auiX6qY:ilAiLcW7tBWJ/Y/pUaMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AMD FREE TEMP.exe

Files

AMD FREE TEMP.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ