WindowsFormsApp1[.]exe | Triage

Resubmissions

12-03-2024 20:34

240312-zcdsxsce54 7

12-03-2024 20:30

240312-zal2hsad5x 3

Sharing

General

Target

WindowsFormsApp1.exe
Size

8KB
MD5

21a21cd811a4544c4a2aff4ee1dd3218
SHA1

f16991e06b6a1ef54a30c7a95b85f8b795e89bb3
SHA256

ab7049041360f0628ed27ea95214a09542380b300c14906bc86fcd64a5fd9dcd
SHA512

b68e2e32b35472c484b51653d8a2652e1b9dc37a90f77bd2b1ae3fa881015fb4b5124892ecd31591a791ece9c3e6c34e1ca060b94b06a6723df4949ccbc29bc8
SSDEEP

192:6Xy/faPeL5YLS0eWYkL3LKLVMzpJVuIfDr9rT:6X2SPeLSL/eWYkL3LKLVMzHVvfDr9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ