Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_2951.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Sourceforge_2951.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_2951.exe
-
Size
11KB
-
MD5
253f50a8e978d78b17831eb92f974b28
-
SHA1
34358b81199a401319fea1d6883be2ddecb7a792
-
SHA256
cc2f5707d4b213ad310f12c933d9251ec7ba02404863f2d1295c06e650872a78
-
SHA512
8f330cb3a595561a255bdb8ef9e2cbd6a75b30a01a47bd8b4b36fab24ee071ff230ce2df1d3b2e6142da15d214b164403d52e78144534ff89a172d0d5449d896
-
SSDEEP
192:rAjN95GZv2aaMHR48VvgdOmlvBWvUSVT:cjYtD48tgQrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_2951.exe
Files
-
Sourceforge_2951.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ