ConsoleApplication1 (1)[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ConsoleApplication1 (1).exe
Size

12KB
MD5

5ba1afeeda38b9eb0248e7a7bff9bc40
SHA1

f66e06f076db6117391297901ce935717837e835
SHA256

33fbd89bc0fa14ddd45036bbadb17d17a7bc8ea68324f58e2e68fa756e8e84c9
SHA512

9ac9fedb4aea6b0808b7e76357158970d524c577ff5416503328441ad340ecfe9f5ddda2f902cc1158788a337dbfc417dd72d9689901333b3c2f08849aad9ff7
SSDEEP

384:MhO0usn8tM2k4IjgtjDMbO1UfkfJ7QNd:b0tn/d4Ij6J7QNd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConsoleApplication1 (1).exe

Files

ConsoleApplication1 (1).exe
.exe windows:6 windows x86 arch:x86

ac000df10960f77f8ef4c66d5ede0fb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kusmi\source\repos\ConsoleApplication1\Release\ConsoleApplication1.pdb

Imports

kernel32

Process32First
GetCurrentProcess
DuplicateHandle
OpenProcess
CreateToolhelp32Snapshot
ProcessIdToSessionId
GetLastError
Process32Next
CloseHandle
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

ntdll

NtQueryInformationProcess
NtQueryObject

vcruntime140

_except_handler4_common
_CxxThrowException
__std_exception_destroy
__CxxFrameHandler3
__current_exception
__current_exception_context
memset
__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__acrt_iob_func
__p__commode
__stdio_common_vfprintf
_set_fmode

api-ms-win-crt-string-l1-1-0

_wcsnicmp

api-ms-win-crt-runtime-l1-1-0

_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_initterm_e
_seh_filter_exe
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_cexit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_set_app_type
exit
_configure_narrow_argv
__p___argv
_exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_callnewh
malloc

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac000df10960f77f8ef4c66d5ede0fb0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ntdll

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1024B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 572B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1024B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 572B