Sourceforge_1894[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_1894.exe
Size

28KB
MD5

5f7a46fc47311c984bcf6b471b6496ea
SHA1

f6826d78a83f6e689f068bdd12298ab0d1f9e3d7
SHA256

fa3e23331c359eb13f3cb2ca610545f76ef7ac6747bb76b202591175f1dac97c
SHA512

c653a01151364cefbaff8c2f487c41df7e43f9fb3144ce8fdcf3e0f575eb537664d53c5b09ef95f29bd8413865ecf304cd04fbb2ffc8f11d229b7fb0459b0ddc
SSDEEP

384:joND95F1fnfXzjjHMWQSd/ri8z3EBnAfH:joNBNXTML8wBng

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_1894.exe

Files

Sourceforge_1894.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ