Sourceforge_1559[.]exe | Triage

Sharing

General

Target

Sourceforge_1559.exe
Size

243KB
MD5

f419638a2882698a03fb6ff8898fae1d
SHA1

d138e1998d91352b88fdf0cc2616735ea345b6b1
SHA256

0bb9d32e2188b0c84334193ffe237b8b6abd61d59374b066654fe7e5b32beb29
SHA512

4eaae1973ae1257c7583bf77b05845c0807272ffc7c6cd48ab239ef7036abc010e770a09d2ea4602f7de35aa478ad0fdefcba0138f254643c57028b9b6962ca3
SSDEEP

6144:SroLcuuEvdm3y9F3U4/d75fD/d75fDq/d75CYa8:gqcuuEv8ytVtfDVtfDqVtC+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_1559.exe

Files

Sourceforge_1559.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ