WindowsFormsApp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp4.exe
Size

19KB
MD5

27b3f1ad45ade62db8edcb94f5793acf
SHA1

8504d9f243fd0bd93a2205fa0fddb091775288d8
SHA256

5941d857979c52b835545e0494f77e6099cd2c9286101a0fdc38850da1eceda7
SHA512

1414c02d21ddcc9e780699e1138a3e9e1191f39a22075fc4f87c87f906951e65fb2a62598944f11289ce2ad615f86bd1b40b6e735d2027caeca9131e2a96c949
SSDEEP

384:xoa6A/5iJ/lfRBZ5LvLctglOCLULILLEzuZgYVSbQ4+fSuPtptYcFwVc03K:xopFLHj++Y8AEgYobQ4RuPftYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp4.exe

Files

WindowsFormsApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\theop\source\repos\WindowsFormsApp4\obj\Debug\WindowsFormsApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ