Sourceforge_2013[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_2013.exe
Size

136KB
MD5

2e474556bbb144b5da43024266609f71
SHA1

bc78b166b1076c2fc8a44201e2d6ac489c14d472
SHA256

f2ab29fd4f1e4fe96e36b8e9713ebfd619e3aceec1fbc24d18fab99e06db440a
SHA512

e74d9ddff6622469effb43074bfeafb946e5fc95c556189eb82d15e25297841a8381028ff3cad8df17e5195e405c387fcb076685b7f82a3fe37c92fcb7662aa5
SSDEEP

3072:VPVBYgvPJgwH7vYm9DjDZzc/OZgVxZ5k:VdBYgvRLH7jRc/OZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_2013.exe

Files

Sourceforge_2013.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ