C:\Users\cocoa\source\repos\winformstesting\winformstesting\obj\Debug\winformstesting.pdb
Static task
static1
Behavioral task
behavioral1
Sample
winformstesting.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
winformstesting.exe
Resource
win10v2004-20240508-en
General
-
Target
winformstesting.exe
-
Size
9KB
-
MD5
65d5d4e37d8d70df47eba375cdbe6697
-
SHA1
d1f70c0dc2352362ee7a6ac1a6c9e5f7be6c1e51
-
SHA256
cfbe18194bf35aa5ba405be75cf3ee2b51135ed8570a7862077f095ffc70aeed
-
SHA512
7af2f574f77415595df2be70a92069381b6a82693ce0e13fc0249d98ad4b16fb3638bd3c5b47d9f218a1c00667ee1272371a0123371c99fd4ed7e3dd2680e24c
-
SSDEEP
192:QVE0+AtNbCv7SXqNQKwVuTC4jQ82ekVAj/s1QBuVSOefhQGD:QVEZAtNbCzSXqNNyQj/s1QAV6fWG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winformstesting.exe
Files
-
winformstesting.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ