Mistake1[.]0 destructive beta[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mistake1.0 destructive beta.exe
Size

87KB
MD5

a5d3244bcee30e42c14da1e883025d91
SHA1

cdfc5fbc7b578bff2a4277b33940daaae5fb11d4
SHA256

bc720f37dd2a28af487622fd4fd94486d0ec4f29e736ec18bcfbbe98bb4d6c1d
SHA512

12f4a86c881e08cf2cdf421ca6525ecb4c1fdc6b921ac549e38f49d11043339d0375ca0c5b5298ad81c45353d609b38baeba6ad8af9f073d4a1bf8c7d3d5bc95
SSDEEP

1536:tVe+FX/PHJWWNclyWs5euNpXwnKgalmz8Jq3AdVbR/Tc3DbdSsSsSsSsSsSsSsSl:y0nHg6GyWs5euNpXwnKgalmz8Jq3AdVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mistake1.0 destructive beta.exe

Files

Mistake1.0 destructive beta.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Owner\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\Debug\Mistake1.0 destructive.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ