tmpgg7equbt | Triage

Sharing

General

Target

tmpgg7equbt
Size

768KB
MD5

6da2a378bc6d3390ab659d9a8857f643
SHA1

f3320110a49ba8155f21194b288042195afcc30d
SHA256

75bcc27de097f7bb0b0d8a8061e707acd561924dfe54b7bb4ccf5fce5ba0ab8a
SHA512

3705efd72c888621d87647da7ef1373548dab204631abde751e9a8ffb6d90000dfce0ec17eaadde78088513cf36148f86d2291e012ac3923aeb5e6705020b1c5
SSDEEP

12288:J1ZF8K13TrxveK6UpNn72HBYvY9vFXPpj5sHKMtwOoRad2piOwXLw4gAkN/t:JyovD6UP7M9vNfsHzwFRs2QtXH6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tmpgg7equbt

Files

tmpgg7equbt
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tnKC.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 765KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ