C:\Users\sooch\OneDrive\Desktop\ktb new gui\WindowsFormsApp1\obj\Release\WindowsFormsApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
windowsformsapp1.exe
Resource
win11-20240221-en
General
-
Target
windowsformsapp1.exe
-
Size
915KB
-
MD5
b9b3d288e68395f4b6aada5d8de9e25d
-
SHA1
33aa62aa4417366019104c1363d9f464bcd4a465
-
SHA256
75fbbed9cc06d2baf3ee4c2b19ad313a3994bf4767269e183306f343364581d9
-
SHA512
63014e79a79d6603350e4b3a82a2410cda5be796241c01872b18acb71b596a4bbeefba7eaf0d4204a8bc00d16b4ba0aae3cc13df9edab0d47b73614398ecb75f
-
SSDEEP
24576:3ITMvRFhRRbNWoCfkYSEH3OqtwIuX/Zq:3ITYbNbNWo4kSH3OqtwI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource windowsformsapp1.exe
Files
-
windowsformsapp1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ