UpdatePrinterPort[.]exe | Triage

Sharing

General

Target

UpdatePrinterPort.exe
Size

25KB
MD5

4e57f70384a7a910b4f3a5fecf13f5f9
SHA1

ae36d8f426d175d7e42570a89273108a70511757
SHA256

667cf49f12e871f4ea12800a8d5148e11d010c4e8927d0432d3ccf51655cd7cd
SHA512

768971810e9e62e3d5f0be9a47143fde819dfdeb9f128e6616335f922b7225357f0cac84d546a38775e8c164886c1a4901082404d69f843e8607531b6fc096ac
SSDEEP

768:fEHP8tyJ9PgS42xA64nM41v1ubV6Cgm3Hrdn:fEHP82gSgSkCX3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UpdatePrinterPort.exe

Files

UpdatePrinterPort.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ