WinMemoryCleaner[.]exe | Triage

Submit
Reports

Static

static

1

Sharing

Static task

static1

General

Target

WinMemoryCleaner.exe
Size

248KB
MD5

ebb6eab585b6d62f4c3ff2aa3d30a9d0
SHA1

dd447fcb6ab02688f927438d2e520ddabb8e0da0
SHA256

5cf342a7237a0013feb61b26a768c103e32c820a5e399818eeadf34db039971e
SHA512

834cd5d7b9ebe06831386fe79f326d327c833324b05560a0776f3bbfedea718c7f41ee5e5c8b915011066689f4f554178fa5561f9aff6ab68381e69aa89c0150
SSDEEP

6144:xLyFrSObP0oi6hH8bXwd5qkHn6Vb6opOu:4GWUwd5Tk6oMu

Score

1^/10

Malware Config

Signatures

Files

WinMemoryCleaner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

19:b2:3b:4b:53:74:78:9a:40:62:4d:4f:14:08:38:65
Certificate

Issuer

CN=Igor Mundstein

Not Before

03/08/2023, 04:29

Not After

02/08/2024, 10:29

Subject

CN=Igor Mundstein

Extended Key Usages

ExtKeyUsageCodeSigning

06:56:18:b6:80:bc:1d:c6:de:14:9b:bc:4b:a0:d0:59:f9:42:b5:ae:09:9b:3e:1b:0f:42:ff:35:58:1d:6e:c4
Signer

Actual PE Digest

06:56:18:b6:80:bc:1d:c6:de:14:9b:bc:4b:a0:d0:59:f9:42:b5:ae:09:9b:3e:1b:0f:42:ff:35:58:1d:6e:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Repos\WinMemoryCleaner\src\obj\Release\WinMemoryCleaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy