WindowBlinds_11[.]02_Jasi2169_Patch[.]exe | Triage

Sharing

General

Target

WindowBlinds_11.02_Jasi2169_Patch.exe
Size

2.6MB
MD5

1f868e4357ce60c1ec17948f3ce82cdf
SHA1

7359651df89ad66a31aa3bc360923ddc7d8e70bf
SHA256

cf38a41ec93f8656e742c71bffb4194d38ccd2e027ed5414f9a2c8435c16021c
SHA512

c0cb20da1a6ba8a3273b56c71d8953fce6ca0baa9d6a3ade06327d519df763822860608390ba0a3c44aed0d84514c1b5588e78582c4fbeb6b36dfdd7e0e2e34a
SSDEEP

49152:h31ZlsTfSVJ5XxP5QL1NOPj33D6F/FdLEsGKzAywZOWzZDx+vEiRVTYi9Y:V1ZqT0XSLnUj3MzLNGKUFZluO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowBlinds_11.02_Jasi2169_Patch.exe

Files

WindowBlinds_11.02_Jasi2169_Patch.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jassie\Documents\Visual Studio 2022\Projects\WindowBlinds_11.02_Jasi2169_Patch\WindowBlinds_11.02_Jasi2169_Patch\obj\Release\WindowBlinds_11.02_Jasi2169_Patch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ