Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_2944.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_2944.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_2944.exe
-
Size
11KB
-
MD5
546be6814ca70ad43dc832e7689a5a60
-
SHA1
8b1ad818a936b64be848b8d35e19c77313706916
-
SHA256
20cbe48bca380f0114635551cb21ba75161a6b2434824726ed7b23b7c73b848b
-
SHA512
f551d8459f70a059bd0692c0bb5559844f6e9135bcb5e92c1c5d83d6d31d52c184b04f58c5ba6b2a75d757e7d1e520a9c5bf4315cb1f9f37fff7bcc4a2081067
-
SSDEEP
192:BVagk33sselvzOduDkq7m7EX7FizUgbD:Vk33ss+VYKm7EX7FtgbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_2944.exe
Files
-
Sourceforge_2944.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ