WindowsFormsApp3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp3.exe
Size

55KB
MD5

1ee5d0f5affe24f75ae9956df668d604
SHA1

8797be001f48b02199483cbcc47ae6315e927399
SHA256

a8bd9db3b3effdb18872fb7fef7d6936e240f76047a190c92a4fab0ab89e7929
SHA512

560f2eeeb8e6aa618e22181f2cb364d4ef7cb58126998c8237166f0642a4e63af042abbaca510dd58a11b17e338e93de164c57aa0dfeb28f38aa293c7bebd12f
SSDEEP

768:e1WPFPbfcCf3wVqO3t058pJkAdqN4FX518u:e1o33O3t05mJkAdqwX51B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp3.exe

Files

WindowsFormsApp3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Said\source\repos\WindowsFormsApp3\WindowsFormsApp3\obj\Release\WindowsFormsApp3.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ