WindowsFormsApp3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp3.exe
Size

1.4MB
MD5

5fb2b441444cb74b935cc18967a53ea6
SHA1

c20f2fa00663802dfc99d9a64648dbc0ef501aa6
SHA256

960e73cdbbcd150ccc81568beff31ee7621224fbd17bd6430b81ab82933bada8
SHA512

d3e70a1b3f2c88464df113f9a56b45bc8b45270cbe89e71024177390a0599b7ee4f180316cbf90f960c3c4e6ddc162d3b86e11d47098e16ff88a5ccd9d004542
SSDEEP

24576:nDsuihk9NvnaKR7GrMVZ1JRSOFt3W59XGyhk9NvnaKR7GrMVZ1JRSOFt3W59XG:n9iuvdR7L1fSOFEvtuvdR7L1fSOFEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp3.exe

Files

WindowsFormsApp3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\jeaye\Desktop\temp\WindowsFormsApp3\WindowsFormsApp3\obj\Release\WindowsFormsApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ