WindowsFormsApp1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp1.exe
Size

8KB
MD5

ad3302d245fa24f0e74199c0bda7892a
SHA1

1b7ac6ed37b5e40f92815fc8a50d769576bbe191
SHA256

4d500006ac94681cc8bff2405d9a734cc9db48e003588c73ecd75507b668b89e
SHA512

22f9620beaf0e11166f73c3aa99d78e0f8f7721865a4e60b3f361971deaee1896d40f9a7edc79926a78215b5c7504847bb9042e1010f1f25293dca70702f1d61
SSDEEP

192:FMuUIZH48klnfMg7WLTkwELS/wwZOHVL3LKLtpJv0tfwrdgT:6unRSkg7WLTkPLswwZOHVL3LKLtHEfwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Nick\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\x64\Release\WindowsFormsApp1.pdb

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ