Imprimis[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Imprimis.exe
Size

1.3MB
MD5

a4f55744628e780f3979ec2174904fa9
SHA1

c6d29b91daae3a9a4b3f300374a4d071ad70fbc0
SHA256

422d80d3c71a5924e66aed70e1fc6eab01f02e4cbb5a181aa06cbba89a676655
SHA512

32f3c26d7a40417bb7fb86dcdde2a3ca42f3c24dd33df38f02eee9d84a814a11c51829d2d3544cdc1b5987fb003c3ecb9434be017b3eca31b2183256dd045795
SSDEEP

24576:CTDWwZ3Fj5Wro1yXc4PyXBjBzxJnkOCVv05K8hqQaq:SFj0sVolBVv0k8ha

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Imprimis.exe

Files

Imprimis.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ