自助打印系统[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

自助打印系统.exe
Size

486KB
MD5

75bae7529106d5fe6283cf5d5d4d032e
SHA1

1ba603a70f8ff3501c0be8d1b7cea733a537d35c
SHA256

d778f76b3e67937063c29b0784f50e86c4070d2479e96e06def4eace20ba73d2
SHA512

aa21e5a69caa5391e5291732abc39244a42890616b7c639b030ede43d529d393d1839b8358a3f56d047c78621513b6e77ba2ba0d2c89eba0c3614b9a229b2fe2
SSDEEP

6144:hKDLXFAIGxi8V9NmoA6K9nSuRI7HoVug9Yh+5sZ9KE9QKqRn:hKPkQ4ZjK9XR+IN9Yg5+cE9QK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
自助打印系统.exe

Files

自助打印系统.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ