WindowsFormsApp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp4.exe
Size

7KB
MD5

56c8bb6145bf1c511993528316a5e817
SHA1

de7c905a8aa01fe878df77b8f154d3e1dc572547
SHA256

fe2b0ca5be55b5dc599249390bff39b5d9219f8aaebe4c47eb245193105f28dc
SHA512

20f71440ebddab10cf5dd557387cdb7efd13bbf1b2c48fd618b9778dc8ea5d5f2cf8315fc6c3485f58f00e95ac6f7a7474ac789b8c2b2435d925616f6b8977c7
SSDEEP

96:QclTUYi73TEzlg6LDUfLf42LfqLxLeWhJWAY6F9pU6LoudnRzNt:jUYWaLDiLwufqLxLFYe8aouNz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp4.exe

Files

WindowsFormsApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ