WindowsFormsApp1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp1.exe
Size

8KB
MD5

6d43c0ca458b6e8f2c5ca24e36e33f7c
SHA1

cde94a698d3d199200c2537185f9740e96b8cb94
SHA256

148f21bfcd004a46f253c8456a0d1dc1ec814b8cf605c9ed3c6b6109ee3a2b46
SHA512

dfde8830d30e8636cb2f21d2039c5850071679624b1c2e00cae024fed46da5a65f2124f26e9412d5abe0415212f78a594703dcd6078e0fc1aa82207654e5c35c
SSDEEP

192:WJrmi4QwQ3HZLfYLS0pWHkL3LKLWtbpJVuYfNr9iT:WsjQX35LAL/pWHkL3LKLWZHV3fNr9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ