Sourceforge_2682[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_2682.exe
Size

36KB
MD5

cb226378d1ecdf1c20c927291b6a88e9
SHA1

b9d0d45d14e375dbe65733a2d116207060147db1
SHA256

1c2066b4e6f5e59258a3b78dcb133782faaf491018117894b21ad7dee0b4b281
SHA512

9e66d2ddbf3dd045620fb81007e2c6881d043654bac5096eb9d619b1ce3ce65c5114aba78c8dc5958632ab6a3e9a6b87235364ac56fb48c9ff701e63788f6221
SSDEEP

768:9dDnf/G2RBBBBBBBBBBBBBBBBSWJLokwX9gowx5p:rRBBBBBBBBBBBBBBBBdJLokCwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_2682.exe

Files

Sourceforge_2682.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ