Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_2638.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_2638.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_2638.exe
-
Size
168KB
-
MD5
72d93a31142c1a0887c55958669e9d84
-
SHA1
463c5c8abf7df7fb0828a6dd0206dfaa797b074c
-
SHA256
bdf2e01f6748f876881134e785da0cb485aa3eb8f5cab56c560f5b900efe44ea
-
SHA512
ef9842859cecb8e5d26d144b37ffbf290dd8a922432969df2d2e9f76788d1e59ed3b221d5daa7cb2f38cb25b61bb79728c8b308f188819af5fd51ba756de1714
-
SSDEEP
3072:UoDqaasbe5hMfAyOIXUrBrMeaaaaLd7po498uO9QvyP:Uo4MfAl4UrBQ02uO9Cy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_2638.exe
Files
-
Sourceforge_2638.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ