Bitmap2_GDIOnly[.]exe | Triage

Sharing

General

Target

Bitmap2_GDIOnly.exe
Size

448KB
MD5

c99931701b5c04023f64c2204056756a
SHA1

131af8d2eeec1116f2c1b6e293a6eb4712b6804d
SHA256

62483d2aa3150c294a65b4944fdf4d6aabf46697e42ab0e011efe92cbca50aaa
SHA512

3191fef7e441ec9990bf8d6c380e13187b010d7d6623452c48cf8d7f3af18f1dee4022cf6d32dadce1116a1f44553fca6af417465133b50fad32f11f91e4e189
SSDEEP

3072:jJNzSBdCGPVHzzgd2HPVVf9AebuLFfK9s7I/mkltK4L6INgDd9Zqi3lhai6ae8Y:jr0rak9gorrUq6ci3l68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Bitmap2_GDIOnly.exe

Files

Bitmap2_GDIOnly.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Hatsu\source\repos\bmp2 - Kopyahin\bmp2\obj\Release\bmp2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ