CalculatorApp[.]exe | Triage

Resubmissions

27/03/2024, 15:11

240327-skza9saa4z 3

27/03/2024, 15:09

240327-sjjt7aeg43 3

Sharing

Copy URL Twitter E-mail

General

Target

CalculatorApp.exe
Size

19KB
MD5

1e30d53233b66fc13e25e76dbd061e8a
SHA1

d408402b2f714653899f1eccc11ba8fc8b96f86f
SHA256

f707e5917d60975629ea0f100aca0a791950ac5229fc374d809557623367ee5c
SHA512

88dea1910dcf081e43e57cd5830782293f1846192849637a1bc03abaa4685acf51ca4059956bd2a1c3e1bf28562fabe76786e5a021b48ff86219bc3f2e3b9fa5
SSDEEP

384:deN7KJTQ/tBaxc8IcbUi+7AOG6HMf82utc2N8WW4W:deN7KJXkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CalculatorApp.exe

Files

CalculatorApp.exe
.exe windows:6 windows x64 arch:x64

50b4a56a3eb2e1afa1f4617500c0d4ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

calculatorapp

RHBinder__ShimExeMain

Sections

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ