Druckjob_PVF_LWFRA[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Druckjob_PVF_LWFRA.zip
Size

12KB
MD5

a69f25fc8b821e9526a7a28231c73a7c
SHA1

ebda6686f03d51c0f138530358ed54361662b214
SHA256

23fe059e2814fa418f18a66db784abd01c5ec0ffed257c2260961d4159c85134
SHA512

41044254ef37a97f6a794b911c69fb21efc3528155b9dec9ac0c49da77a0e9e97bf3e7a8481f7677298a2f8705ef6b06c94a9681f4320e392cbf862e50ef3645
SSDEEP

384:/Wsc/kY8ol0fspM9Ofw5g/Y/VpGgWlrLd:/0/kIy/9OIu/eLxW5Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Druckjob_PVF_LWFRA.123

Files

Druckjob_PVF_LWFRA.zip
.zip
Druckjob_PVF_LWFRA.123
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\A-GehrkenCh\Documents\Visual Studio 2012\Projects\Druckjob_PVF_LWFRA_Einzelne_ohne_SFTP_Druckerstatus\obj\Debug\Druckjob_PVF_LWFRA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ