Camscanner[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Camscanner.exe
Size

644KB
MD5

b897c71df3789b95943d9a0444393fc7
SHA1

0c387d85b9b8e7f32f906b77511243d3157a6706
SHA256

76b695c17786615cfe769077dde4f7d7dae83e8a6f638680c9e0e59b8d1f582c
SHA512

7c100a04ef741c998458ac191aab3eb9a936fa2dff65e883078c42a33f7baa5f996db3825ace0b7a55c055503c143ac2d5932d093c94fdaf6096f9a049bf954b
SSDEEP

12288:VVMcthmJ+ieqkC8eoYv+LxW6G07Wq7rT1N6WqTss5y2OKqVyQAFnSM5:gDkCJOFZGyWq7lNVqA9Kq8QqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Camscanner.exe

Files

Camscanner.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ