Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_1638.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_1638.exe
Resource
win10v2004-20231020-en
General
-
Target
Sourceforge_1638.exe
-
Size
48KB
-
MD5
1f2a9dac493acfacdfb80866af854eca
-
SHA1
8e631087b2f6d2bc6e00521c707941d083ff3ee5
-
SHA256
f7cbc74e55c6d5a934056cfe88e552f0cece3cc95fe0701830cd232c2fbbbec5
-
SHA512
b4722e986a850284ce9b65bf02946cea5d766b09b3bf9172a1f7d2b754239b7f6ebcb8a21d9164e89c04dea8af38ff29d8b99cb37a4ac79be5a1be0784a1b18d
-
SSDEEP
384:6ejK90tTxmPyxxVe66nwj2UMuGOGDlTuIjVxhWidm3a3cNDDo0wfkV3JEs45s:Ls0tTxJx2+2BuAB5jbdm3asJDNFJ2y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_1638.exe
Files
-
Sourceforge_1638.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ