HP[.]Smart[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HP.Smart.exe
Size

31KB
MD5

ec6fba99ab3ec689442bb37d3fee9a19
SHA1

300ccbbe08b0ecccb217df8b7a03b32d62617ca4
SHA256

741bbf0c72f4941a22e253aed8c6f9fdda160fb1bf5285e1bb6da9c8abcecd8b
SHA512

9ee2d7d077e2d74bb6fc08b260bc3ed22b1df948c25bf3e67c9569b51e7b7105aaacc27d36bdf13c4841ec47cacf75eec3308efed3b75c60fca83f690aaa60ef
SSDEEP

384:ZN76mnSswZqC9EBqJjS+nzgwPkxah8co8r0i+LHgelqHcfMmeNsm9p:ZN7bnSswZqC9EBqJjvhLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HP.Smart.exe

Files

HP.Smart.exe
.exe windows:6 windows x64 arch:x64

bb290dda5a3c2498c6ffe3ce9897071a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

hp.smart

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ