WindowsFormsApp1[.]exe | Triage

Sharing

General

Target

WindowsFormsApp1.exe
Size

79KB
MD5

89f7d1d6daf4b0ec71d91e777e65e006
SHA1

78b2e8184a2fc902c41d0c280865d42f779a3396
SHA256

46a3ef2b3650832685ac981bf1ce73ba3ce459aecafdf688b7d29e6e245938ec
SHA512

b7c4d2733c79775db0f9538a10efe54571c78ff3ad4fc07e7e150f3d2f80429df741b2314b859f20d782ba9dcfba4f9b11765f61f0f445d4278ae075d82025b8
SSDEEP

1536:ImaX4W+8AXpbHfYzT9QIjVbGB0TOot4h4CWTcWJwS2W77ddiahtr4eIr9C:ImaX4WsZYzT9Q8bGB0T/4h4CWTRyjW7n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp1.exe

Files

WindowsFormsApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\my pc\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ