UserPrint[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UserPrint.dll
Size

5KB
MD5

a2355daea89f9217aed84e087f32a90c
SHA1

0b16951c5d4f9c24721408271e23448639860c80
SHA256

f17d0183b3771a9db315dbf3fb040f1fed51bfc3f6234fe92be7f43ba4e801bb
SHA512

62d5327d84d245f344fdc5901d3b0689faaeb5e2fa0b4ca23389ab7aa88acfc77c47168716269f767f5984a8dcb617c5664b6c56eb233d5293bceb42005a62d6
SSDEEP

48:6MUpt4YzpOHnwLsW+OIeNMuK618TW86NoH1UHQ6Xdm84tqUSP4mWldYZEiF:MDV4Hw7+mB16EOaHxXdmU0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UserPrint.dll

Files

UserPrint.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\京沪彩印\erp\UserPrint\obj\x86\Release\UserPrint.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ