Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_979.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_979.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_979.exe
-
Size
7KB
-
MD5
cc67eb473e77610525217a7985e5b702
-
SHA1
911972bfb4ec09fbd34bc994324b36b5805739d1
-
SHA256
904512c0cf30c907983da385975611315bdb45c88abc6d0bfa1b3f0c27ab8388
-
SHA512
a1de4202ce032e0d56074f0de4c9e8295ded66b4279d5a19c6d7cbe4bd626b614a27a1fbb9f8f30da0ac8549ba5b1c13a6ce9204dfaf9761bd3ea10bbeabffbe
-
SSDEEP
96:hVYj+SBICswAjTOJbgn8bWUPaVQN/bsH8GsdYOwdMwDYr:2IPgpg8brIs2OwdMbr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_979.exe
Files
-
Sourceforge_979.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ