winlayoutmanager[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winlayoutmanager.zip
Size

877KB
MD5

aca795322dc232479180a3f09f500ebc
SHA1

b715a4b695626fa68736544616f9699f6f8eb753
SHA256

c5edea1bc867a48cb0ad15d7f2a590143d2d8f8659715a33efa0b02fe6a4bcea
SHA512

cf77ff5d0d9b2f0772513d4101d5edb65d2a4c0f113e41c2dacdd783588533224abb0be956b74b46013bfd3bfe853608a7464687e125eab4f768d78ab5cec8bc
SSDEEP

24576:otSY0t1jltc2/2KfO6Iy25tXzjH3lA2clR/:oEY0t1XcmvfdIy255L3m2cr/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/WinLayoutManager.exe

Files

winlayoutmanager.zip
.zip
WinLayoutManager.chm
.chm
WinLayoutManager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\WS\Ignytion\Products\Ignytion.App.WinLayoutManager.v1\Project\obj\Release\WinLayoutManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ