WindowsFormsApp1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp1.exe
Size

894KB
MD5

aeb07065f95cc41ff8d2aae8c78d0605
SHA1

8f1922e9d302332b1f05d1abb22fdb97a30d892e
SHA256

b47ef81d69dbcd13e5b361323d071c3d043480f21152d0d1c81c3d9715ebad87
SHA512

5f94f4ff2b64bcc5f74537931b3ae521660f5f7a5eef96dc4f3b3d926c57cf3ec935716d373ba37550e6c0aa8472015073b72f2b2722ea4f2c2fddcd57520ea4
SSDEEP

12288:gtM7NFSCJ7mfhElJ9XInIT7YmEGgysQWK7+PFux0wITbhKx7WQeu3D9FPJXOmQ+E:JITMvRFhRRbNWoCfkYSEH3OqtwIuX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\lali\source\repos\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 889KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ