e647542143641a1322b44a2cd92cc6d183ef7b5c8c5df342ed7ef84aea5edcaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e647542143641a1322b44a2cd92cc6d183ef7b5c8c5df342ed7ef84aea5edcaf
Size

168KB
MD5

7857caa5ce05908a5806e1297bcc74de
SHA1

bc51c840bc4e27979183f75a1bff30c1e1e154e2
SHA256

e647542143641a1322b44a2cd92cc6d183ef7b5c8c5df342ed7ef84aea5edcaf
SHA512

bc0a2273496b7b283d516615d3490f08493da946741f45ecbd78d6d93e061d117833b2258f633341442728e5888d73adb573cc2ad8a6ec59868bc015c892af3b
SSDEEP

3072:T7NZahq190ls10DKvBtmcpdgKSFiKhJXDBfhIaRu2ZODS:T7NZfGXUW9FhjlnZwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PrinterTool_NET452.exe

Files

e647542143641a1322b44a2cd92cc6d183ef7b5c8c5df342ed7ef84aea5edcaf
.zip
PrinterTool_NET452.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ