List Form[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

List Form.exe
Size

28KB
MD5

a475c0173be0965f05a43a8c685ddc3b
SHA1

93b6218bd74a083e1a82f65b610b46249e82508e
SHA256

c6151511f741e4179c5aeaaa10a11d6599f67a381c9ecbc5c56d2cf9af932e6e
SHA512

62a07ba91b8e0b6b266d5707e5ae1b4a83f5b286804407ffc2c07ef4b3f2337b13055d592f0d671afafb59758df3571c521c5d955501645886dfc8baca4ac999
SSDEEP

384:66oVIxLy54tfm9zn91R3ZV/mydvQwPBzL3ynFb8WSj0YxZ8Ni6VHyj6IMLofeq:xoVIxLyKm9b5/my3Pj1kNi6Nwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
List Form.exe

Files

List Form.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\source\repos\List Form\obj\Release\List Form.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ