ParentalControls[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ParentalControls.exe
Size

9KB
MD5

4fc7448eaa18168b0bde3dcdd79d8bb2
SHA1

617f9dff2e55045d875c1c0f397b129a2504b0ed
SHA256

5953ebbff5c8f8e4f11270fe6523b7601595d2195573473bf3d838269f719c93
SHA512

5e17c00d3df74ed2331b4fc61439ad994490ae7d163619bb73f9a7a765fe5b628e71a4d4f6d69d10541d408c76eda0bf51aae6c66450f0a8cbaf461511a47aea
SSDEEP

96:T9Uqq+LQGocyRfwcBopouhGQBH3Bw4hu8JNusV1G+WZ2OLSNYB6HQVB/rXv6du5D:GqH4RJBodGQx3SOu0OL4YkwVB/9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ParentalControls.exe

Files

ParentalControls.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\cunningham.liam\source\repos\ParentalControls\ParentalControls\obj\Debug\ParentalControls.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ