WindowsFormsApp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp4.exe
Size

18KB
MD5

b71b0a7abb10f7807301234ec36274da
SHA1

4dba2c0370a48087d0ebabd038e0e1e8544c8f08
SHA256

6a9e7d08bd9f92ef487475407bf486f30efd6eee7daf4b7ad1c6640f3ae7367a
SHA512

42f06dc99b18a4156f8245d1d62108c8146600ed3d77c3cd070683f0bf209cdd28d1009452c06fa09d28b0039e8c9b6f76ceea349bf8fddefa0d013e6c38b763
SSDEEP

384:O+EG7lHoKkpAFX9TuLMLvrglOCLULILLEAHkYuYVSbQ9feuztptYcFwVc03K:4iZR2gT+Y8dEYuYobQwuzftYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp4.exe

Files

WindowsFormsApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\theop\source\repos\WindowsFormsApp4\obj\Debug\WindowsFormsApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ