MapColor[.]exe | Triage

Sharing

General

Target

MapColor.exe
Size

11KB
MD5

96105cbf8b1663718b07e01a112ad1d7
SHA1

190a352854f9e35a37082fc03afd917f25a1d595
SHA256

10dc10518c71d9ffe98d058f8e8c7f597f4164f2ed5ce38920254498f2700d86
SHA512

dab3e690633587669c1367a877724c44bb7ce29bdb6d5021de5aa9ed16a20317dfe1cf7e6c39503852f86395ffea11fa507ff2a0dbc37f2f9a10813a1111fbe1
SSDEEP

192:2DLp5j7Mpmi3OUBRRTB56mEPMD5psbE4P7IuiVMDflhwY:snW3OUBR756OpsbE4yVsflhw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MapColor.exe

Files

MapColor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\djelm\source\repos\MapColor\MapColor\obj\Debug\MapColor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ