Sourceforge_1251[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_1251.exe
Size

20KB
MD5

42776061fe46c637df79f175f0d194b3
SHA1

15a5bb48ebbca0d71d015e5fcb6ba2b96c3b2ea8
SHA256

0491ede0f6422503299cd4c92d2d2fbcef082086bd9fe5272b58b862cffa8247
SHA512

f090adb3b21f74c90215ee86ff3fed748fcf15a12e629255abf2933d3a3290e7dbaff8d278d84007dcf0173fe47973c9886db90a3dfae8ee0e7b7e1350c322ca
SSDEEP

192:WByWx7/n326P3pfxv4pw4t03pYCKZ1uQ:syWR26P3pfxvSw42pY5Z1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_1251.exe

Files

Sourceforge_1251.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ