WhitenessRecode[.]exe | Triage

Sharing

General

Target

WhitenessRecode.exe
Size

132KB
MD5

3f9ffd06b4b384519d5e17773e8ab20f
SHA1

2fa973b08d7752d9da3858963e6f83a9df3f015a
SHA256

289f34c22576c0043ca0f79bdf5954912af662412db7b9333f7566bb3cdd91ff
SHA512

f276c8218ce9cdae83243608377aa8ac128d8b7cddbc76923b56633cce167012330ffd722d5b81ebafe0816b62d3c9969e83dad69d5c6ae7911dd55e54f5a5a0
SSDEEP

3072:jCOW49bVm0JdcX550kn4G6kjsaMS9Ot0LaMS9Ot0LaMS9Ot0e:GOUznVvjuTjuTju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WhitenessRecode.exe

Files

WhitenessRecode.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\SystemX\source\repos\WhitenessRecode\WhitenessRecode\obj\Debug\WhitenessRecode.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ