NotAMalware[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NotAMalware.exe
Size

11KB
MD5

5644b6adb8c25b1fb4b28ca39b40e4af
SHA1

1f2525fd6fcabd17f7fa0ccd1ff5358daa678c5a
SHA256

d50b827e3a3adf6c4ce5cd3d4e6c0b466a3f5dadb790b7dfdbfb54f6a03cc490
SHA512

000d9142e4ff2ceb49f400d00844717504a3a67009c59bdd3b960224d3948dab3d5f82a83d58ebe43b77818cf2f7828cdaf2fcb15b1d2e501816f169364eb521
SSDEEP

192:TPuDusLa2mmfJnSXgnX2x7aZIx6IEPOh+TeR5nGmVJ8uo:CysLao1WquuWx6IuTeDbVeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NotAMalware.exe

Files

NotAMalware.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\C# Projects\NotAMalware\NotAMalware\obj\Debug\NotAMalware.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ