WindowsFormsApp2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp2.exe
Size

14KB
MD5

a5b33d9db9d4b248f6d1d66287c8772c
SHA1

f410bcb2bdc51a0fa89868f129e7f8430464c138
SHA256

911d69e69b591cf2ca930d3ef88c8198bb428fe40b423c5d27dfa8a7358ea235
SHA512

5d0488b651af6b7971750cb35370e41712874ba7af642d71284c72b446ecc6e87e34e46a22c2a459959a977297a42d1182fe202e97bfbfe4daa499a146e54013
SSDEEP

384:ot5YGv+lzAHxpLx/0LyIqLjjNN+VKm9fPL5L45UhQneaV9flSEI:ojx3I2StD9455nea5SEI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp2.exe

Files

WindowsFormsApp2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\giova\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\Debug\WindowsFormsApp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ