Printed File[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Printed File.exe
Size

9KB
MD5

2d626782ee5216f18f05b8c2cdf320fd
SHA1

41de2faeb0958341fa0cc4c983e7e9ae6ae14f45
SHA256

cc171970c56e7cb26c9e4280f659724ea7da7717f1a6f950c8782a5241fd767c
SHA512

d2195e8af9fc68dbfaa5f0abceb2e1bc4e56227ed12ea63a110bb7be4cb50bca567bf076436e77b4c5d6d33c1e89a066bfce49aa80ea3bea87a7eb2a72231918
SSDEEP

96:aSs40EkSffff1U6EjS3Pf0qw9V5uq+45L6T/Nh1pja0u1K3Wwlhmn90gRqFnU:aSsXEnffff1UvkPEhp5L6T/7vNdZUf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Printed File.exe

Files

Printed File.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ