NoFences[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NoFences.exe
Size

55KB
MD5

4ece49992f7f0979c73ba4c87885d0f9
SHA1

615575afedeeb7e022a5750e7b8c2de292a3c9f4
SHA256

c68515e759f13a6af53c6c83cf14894e5dad1f22ab5b3c3a4d81ad7425105e0f
SHA512

d7e103b4ac3ae098e5f59dd8ea8c05f3f565a53cb27bcf470e6306e1e64d58852b0ddaedcd1e896b21dd843209fa52fd21516b5fccd4669d1bfc88e3de9d28d6
SSDEEP

768:7BylyQOs35pi7vMxeskd4xzXl93g2qsaz0lMiQdZFXS2n5pHFpeSGS:7gJY7Ps8CTl939q50lMldvXSKpHFpx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NoFences.exe

Files

NoFences.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\GitHub\NoFences\NoFences\obj\Release\NoFences.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ