ForlornApiTut[.]exe | Triage

Sharing

General

Target

ForlornApiTut.exe
Size

10KB
MD5

6f7c87b7c38b7014f1b868c87b5ace4a
SHA1

77d9d111ae01909e7d8a9e3a1ba397174b98e19c
SHA256

b2d1084858e0f0aa57089590faf08fb6abf64415bf4a17412ff40c816c964415
SHA512

5c204ed0041381ab6a0d38fc84b62839fa2386c9a239b3c69392d1819cfa7d1068d453b0747e0aa0de3816289e65ce235789b1a6e5dfb44f29abdf9cbf371b9b
SSDEEP

192:opuuAcu+g7V0hij8xEBgY5BlkwQSi5TjDKq9oFUJi04Oa854+n85Gf0/obVRsfSm:AuuAcu+MV0hij8Gq9Li04c4I85KbVGfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ForlornApiTut.exe

Files

ForlornApiTut.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\odjh3\Downloads\ForlornApiTut\ForlornApiTut\ForlornApiTut\obj\Debug\ForlornApiTut.pdb

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ