WindowsFormsApp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp4.exe
Size

20KB
MD5

818f3c220fadca7393af033f05ef70e1
SHA1

eef1962ef5b348a97b5e624cf2fd76057c8c1102
SHA256

d465035443e5aaa38890bf05e73ac597c45d19a042dff9a3bc183e4f7dcdf4c9
SHA512

011d8d34f0721e87931d2d20a1ef3175d5b40e9e2f0cc1dd87afa06eb10a4420104581927882da49cf69e8913c4e87f94c0a49f48f75f9d8a650ab35e290a83f
SSDEEP

384:mo1aCsaL/kc/t+ZmYB3L7Lc9DlOCLULILLE9nC1YVSbQ4efWuwtptYcFwVc03K:mtraJF+ZmYBb/9+Y8mC1YobQ45uwftYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp4.exe

Files

WindowsFormsApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\theop\source\repos\WindowsFormsApp4\obj\Debug\WindowsFormsApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ