0-spoolsv[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0-spoolsv.exe
Size

7KB
MD5

86d5e1cc8b24866f9b5e5b57b67ef4c3
SHA1

292e3e1b25d8aa5a6793456d1234c17eac64d4a5
SHA256

cad2ed7d8b8e89d1feeb383b723005d5803fdffd2f6f52439930be975c412406
SHA512

748a703aaa0121c94af39efc060edd680ca54b823a7fb636df766405641c0905a3f414b763650c8a439dad14f569bc9ad7322c8c9587acd6d6458574aa4e873d
SSDEEP

96:MDBmB+BTEKszG0UQ9A+TA+/rBCyP+nuracQiP/YYhFK+D+zNt:hdGL9F+YyPOiP/zhFjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0-spoolsv.exe

Files

0-spoolsv.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ