png_GDIOnly[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

png_GDIOnly.exe
Size

293KB
MD5

9632b4c65dc5c49b2791caa00db4c7c8
SHA1

424231625fda365d168d59bf14b82f41cd115d23
SHA256

8c05af517e990d3f641a53d81e9a13c9ca443636d34da7723f3771bc34b7c7f7
SHA512

f4bf50c240189bf252b6ae1791c604643480bd45e8b19bd5a561ef8ad9863c92688916a4145293b8c5c748f0f2f3e30c5e1286f409bcc6027327a9ce44300c0c
SSDEEP

6144:pS+jHJ68dxc09f41bf8jYAXlnSl6Nn0nztAZ8:pS+jHo8o09fUf8jbF0nztA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
png_GDIOnly.exe

Files

png_GDIOnly.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\NyaNyaw\source\repos\png - Kopyahin\png\obj\Release\png.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ