SpoolSample[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SpoolSample.exe
Size

155KB
MD5

f559fb3631b858ce1bbfd5afac41031a
SHA1

dbf34a2aedbc276b5e63376a56c0c71c8207fc8b
SHA256

dafe724099b2eae0fdc008a4c54a1bfddaa111c970b97393fda347ee449f811a
SHA512

9c29d606ba91884d99f2ca678d58b5fa620d2880428c4bf5a186ef4f06677ae93810f18f5e63fe52fdadb157bb7f4aa72a4c2b1413a806a3960be8ca003db31f
SSDEEP

3072:nhcu+bi68MIQ/675S5P7FPkru853A2mhoB1WXGWmnow3g:nhcuQ8lQbt7FsrX3ATo73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SpoolSample.exe

Files

SpoolSample.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ