PasswordChanger[.]exe | Triage

Sharing

General

Target

PasswordChanger.exe
Size

10KB
MD5

9e041ccfa4a513ed3f28151012e42751
SHA1

76d812c4850f303cb83bb8b7fddf8388cfb5d55c
SHA256

c2861df868453a5a1a809479ae7afb170c84b907f3228e9da871a2e14bd6f546
SHA512

5710b4e50d674397f8eb0a19eff9d29faff7c9bbcbbb1744acb997462ded784885b96766ee2170ad8f04cb46e406f267a6152a184c3b0c93adc54051d5f59361
SSDEEP

96:lhLCS1UajhNg5y/FCff67AZdSzTzeXqwzaFevzhFAQj3T3mQMn3UlOML31S3mRl7:3VLTv4fUzIq+o2tj1hVU8fHgmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PasswordChanger.exe

Files

PasswordChanger.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\source\repos\PasswordChanger\PasswordChanger\obj\Debug\PasswordChanger.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ