WindowsFormsApp2[.]exe | Triage

Sharing

General

Target

WindowsFormsApp2.exe
Size

13KB
MD5

0b5eddb072a1562788be83a41c60d022
SHA1

0e1de79154afcb2537eafe4c605e27a1d8340481
SHA256

27eceeb92a69aa1c374dc63c2245a95957adf6ee3b3698fcbc57307f610bb478
SHA512

215c9269e89fa1094d92d30ac55481136ae2fc33d3579ab736e87f0110510b40480118bfc0ec26f0a03566aab962a0e8a0dbaf4cfa6bf7da96f2ab5845d34fbe
SSDEEP

384:6cnxOTMRXl3hOYPNN2h4/MxhLBkL+jCjMuLSLnLrLFQW6h63ICaVeffMSEc:lXeh4MBoMqOLvFGCaHSEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp2.exe

Files

WindowsFormsApp2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\repos\WindowsFormsApp2\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ