1011[.]exe | Triage

Sharing

General

Target

1011.exe
Size

23KB
MD5

1a0ee931cc4b735c48ffbea25d41b45f
SHA1

4f208d1675ef4189704394996f44879f26120f7f
SHA256

d2cfe00aa19d739554118850dcf15a71827e50de7fbaa39458131cbb3d411e44
SHA512

e98bd6c86cef10f130a8e8e0ba50c57baa65f8772f25a041990ca13c5859f2f981ed6bf7a563abba482a360f999a5dd1064e16e4f4fe50a0c1e0020d92b11d2b
SSDEEP

384:d28nBQFcdt84SCyZyUxwX34hsTEb+l9c6LcLO9QQeyoHhLBLYLf0fss5VqffBt62:Qp5tGwkjqV1Mf0fpViBtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1011.exe

Files

1011.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

\\Mynas\2t_basic\WindowsFormsApplication2\WindowsFormsApplication2\obj\Release\WindowsFormsApplication2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ