Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_1984.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Sourceforge_1984.exe
Resource
win10v2004-20231020-en
General
-
Target
Sourceforge_1984.exe
-
Size
702KB
-
MD5
82e11def957d10bcd569df933b743339
-
SHA1
fe5c6debf44d6aa567055c5e568886c1e1f22507
-
SHA256
552c252ded0aa560b685a65cd1fbb3d90d44722353982cd86d0398c43cac1552
-
SHA512
3e5401bae7c6673629bd4623855f14540d46bf5035912298a9dc2f3c6d4f4505cfb70f87c98b82461d13b77c6059b47c34daaf4d805286d89311047fef98e114
-
SSDEEP
12288:7hYRbXq4XuNb4U1ppppIO6yINw6yINFS2ZXIr+T1BETcOQKT8Py5q3IRGTCORq69:1b4KppppIlyINyITlF51BETcXKTzIHTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_1984.exe
Files
-
Sourceforge_1984.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ