CalculatorApp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CalculatorApp.exe
Size

19KB
MD5

28974c8573f61f660af3df7222c280e5
SHA1

32700c2a52b3f9e2b0612b1d17e152f50a6d6230
SHA256

b4fd50642f7514bc032a6247031ffe33d57b854ec745792fd4fd519f7e03166c
SHA512

3013aaa75e6f38351f076b93e82f02ef83cc6147dd8ea8582f034b133e05771abde02ec988c206a2bedb454c7e107e8350d45fdf9cc650d91c5bdf71244edc60
SSDEEP

384:LN76JTQ/tBaxc8IcbUi+7AOG6HMf82utc2N9W94W:LN76JXkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CalculatorApp.exe

Files

CalculatorApp.exe
.exe windows:6 windows x64

50b4a56a3eb2e1afa1f4617500c0d4ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

calculatorapp

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ