Sourceforge_167[.]exe | Triage

Sharing

General

Target

Sourceforge_167.exe
Size

28KB
MD5

d59610ec42a4d70e32bcddec88cd1a92
SHA1

1b7e1088fa24dc6472d57d18c2d423839094f056
SHA256

71e5c7cdd09d52d7baf895a117850054bb3453eadf538c55e9328f21cab25848
SHA512

77d728d8ffdfc7336c7e3b91ccc7b66ac4e8b759c0876ee2aa035c5e3de43b07ae761d540ae96aa0215a0f7960085b776734fe9add4932208c49cd4f5497ad73
SSDEEP

384:OtYZMSE4S+Ka2mTvP96ug6yBLzUZUj/6H/qCZS3REtk6:hMH6yBfG6CoBEtk6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_167.exe

Files

Sourceforge_167.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ