Sourceforge_3633[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_3633.exe
Size

24KB
MD5

1f33ac0ad37eb87b52e2211212e5b6e2
SHA1

dfffb5eb348a496d39dd2f57242d85762740af8f
SHA256

5ddbf06e2ebd4da585ca08445b8eb261a33650cc9df7a91d97f4884a76af8b07
SHA512

6a804ce83d9707d12bab858e948de6d09cbda6f29e57dbb03c6ac28df842bb9f9ea0c6e7411c891491fdd6d21671ab4ac5ce51ad96a2b13183aca448718b50fd
SSDEEP

192:C/CGTmsnRAPtiGh9c3db9GlVIzjNhBgsGkbkbepk/VQ6q5QXb:CqBsnRAP7hqb9GlVG5hXGDeC/wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_3633.exe

Files

Sourceforge_3633.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ