WindowsFormsApp2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsFormsApp2.exe
Size

13KB
MD5

2624953fff051e2913ef8083c3da0160
SHA1

6096d6a3e4b445bc61198254800776704dc5c782
SHA256

556e8bc958e5ccb7d7e56383980763f99e827ad9ff70eba3b9e695ce8c4b2237
SHA512

a46b22152fc300d281b11e00120498713e4cc5a91a5082e5a4c25ba44c740bf38d38874b84ee6123a051338918a1334993f98c96d3dd8cfce3d7568c4c5b7b2b
SSDEEP

384:oxItX9wwQRzLaLDvWpZzjauLSLrLM3ET1aV1fESEM:oxItXWRnmKvWqOvM3uaMSEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsFormsApp2.exe

Files

WindowsFormsApp2.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Veni_._\source\repos\WindowsFormsApp2\WindowsFormsApp2\obj\x64\Release\WindowsFormsApp2.pdb

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ