WindowsFormsApp1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp1.exe
Size

79KB
MD5

f4a1e91d1690e2501e7efbb6c34cd3ce
SHA1

288050666fc8c919881934fb3c99872f9a80ce98
SHA256

b8dbb4e88d75bd3a5fc13bbec2f8bad28cfb1e1878570f5c47bb7e57357950c4
SHA512

63b58e12f86936165d3b63e31560e3fb2230d11a2a9dfb8e65aba6376c522946cd47d87ddbddd18b280745f65fb8b5b5555ae9190fbe1d4be33f1dcb4e358d38
SSDEEP

1536:E5Wk3zh6ToH34eizY0MA8W/P9Nbg+lHStn3NWIUTukTxG29suranxH2ufS/73NBL:E516oH3Os0v8WdNUyHOdWI6ukTxG22gp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Nyron\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Release\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ