条码打印[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

条码打印.exe
Size

2.8MB
MD5

29ea82d8a5bb08fac94870309921a946
SHA1

91982e027f716458ec708f2289c61662e14ac338
SHA256

f346e821fc24a24d19b5ea1cd5ba26d417a13a0a393ca31afd89a31c62dc8985
SHA512

0f00959d03eefe51dfdfdb7b65905000f448a66be2e34e1d99c2c41bcc016066fa9565c5a20ab7bd4e34c5d7580563eedea8ee6f7e71cb3611e2882447b18571
SSDEEP

49152:msf9BGS/8RdJWq6XlYG6HTI0Z5Lec4q2lyM7Mafe1oUgFhUBFljj3lXS80Cx:msY2LG1oC53lX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
条码打印.exe

Files

条码打印.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ