XEROX_camscanner[.]1610203[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XEROX_camscanner.1610203.exe
Size

79KB
MD5

66ab2329767f03161045825027e753e5
SHA1

02ac012a3f582351feba531d8555152d5ac32fec
SHA256

009db41ad28b09fb48d62e80d806db54b28ecefe0e5ef4478a4f52b081dbc9f5
SHA512

8e136118991a3c5b561bc5d95befadd03d2a7ee1c5729d744e6f5aac12b92dfbcc0a76309b74f254132c50c3f5a98c3c0685a8bd0f7d5e3ed5241f688dc7a3ea
SSDEEP

1536:CW8IMLaUu7JTGOfBshlHCaqabMJezDUS/Bo/9SGAT3:CWjkO5sjHDFskDa/MVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XEROX_camscanner.1610203.exe

Files

XEROX_camscanner.1610203.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ