C:\Users\theop\source\repos\WindowsFormsApp4\obj\Debug\WindowsFormsApp4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
WindowsFormsApp4.exe
Resource
win10-20240404-en
General
-
Target
WindowsFormsApp4.exe
-
Size
12KB
-
MD5
718cce1d2d24297ad30a19da67350c76
-
SHA1
53f73cab0232a37d656f4325e879726fdba60b4e
-
SHA256
b36061424eb9a4e5fe0bd8b0ed0ee1b9a60408e51c740b13bf91fb3657e8a55b
-
SHA512
d738d3a356f574f0ba88e6b9f0f432deb169f5f59725ca2f7e9d456a6900aa5aa479a4da1475af15708d7e8f7e60598f4f776a36123fe2989433402588739fd4
-
SSDEEP
384:d289HLAtLWLYglTTCLULIL2YVIfuu3NptYcFwVc03K:E89HLARiR+Y82YVu3/tYcFwVc6K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WindowsFormsApp4.exe
Files
-
WindowsFormsApp4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ