WindowsFormsApp4[.]exe | Triage

Resubmissions

18/08/2024, 12:09

240818-pbrchstara 3

18/08/2024, 12:08

240818-payefawdmq 3

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp4.exe
Size

10KB
MD5

a03673b248cd44f5ab0a71f4ed013c09
SHA1

8307501f78ed321dffa6b5174b8394e66ad43687
SHA256

44dfd5929a722648c61dd3aa3b3bc6b3a33f75c4ed2742642df11bf85cb0b533
SHA512

69b4fbf280d142f685aa21fd86e7b9b7d58cf1fa0091123db984adbd247c3b441921eafc42a372da258c6190693855381bbdffe863c2aecb5182bb1a82956606
SSDEEP

192:WpSRmkgRaEJkwFNhKdagM2mjjLhDLh9a5mF6FLlLCvRdarqd88oum1C:WpSRmkIzFNcdaz2mvLpLLsmF6FLlLUcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp4.exe

Files

WindowsFormsApp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\prens\source\repos\WindowsFormsApp4\WindowsFormsApp4\obj\Debug\WindowsFormsApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ