CartridgeWriter uPrint (SE)[.]exe | Triage

Sharing

General

Target

CartridgeWriter uPrint (SE).exe
Size

123KB
MD5

f8866f96a2bad8cfa86f7d7136b93cb8
SHA1

5af2056f45e066f07657e642fa0d01e1f3261218
SHA256

9e1e9f0e1c5da9969c60182148b389c112e3a64802b550cdbe54fd194f7b2854
SHA512

c47ed3aa8d0975d83889a24093874eaa2f5a1916ad2f1f02fa3a08a97a62f2404823c303ec1747783e8d7139c0189a102dc2450fdee44d1002006be39e2f2561
SSDEEP

3072:X4XJhPWxQDyi/OgSQNKNwNNp4lKHiOlKH9:XkYvMzM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CartridgeWriter uPrint (SE).exe

Files

CartridgeWriter uPrint (SE).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ