Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_995.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Sourceforge_995.exe
Resource
win10v2004-20231025-en
General
-
Target
Sourceforge_995.exe
-
Size
16KB
-
MD5
b5ee38bd495a7e316677c0b6f04e7ee8
-
SHA1
eeeb4a4ee1576d3b4a7c70539db43baba0348731
-
SHA256
f7dd447a059b5be844f0e3f405bbcc6b71ff06df152f6a6e8a83cdc4c1c78382
-
SHA512
2fb2a523b0f7137f08c948826fbd2a2f35ffad6d4366e25d4089efe817d0b5ef9a4ca75e0d266ec2a81b24ff5ac0724abba15e6101cd9b7026d5ea679c4e5a28
-
SSDEEP
96:9f5Ra8JyKwqMQxCTICsCweau8x8WBvzNt:fRtfwq5wEFzvL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_995.exe
Files
-
Sourceforge_995.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ