Sourceforge_2820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_2820.exe
Size

32KB
MD5

00297003b4ab1a565312286605e2ac28
SHA1

343f52076b78f571de4c2f04d7882905479464f7
SHA256

eca1d968a891ad43020f8ac8cc9a9bc8beff47ce756328fb50d6f143d44a6c7f
SHA512

fc643c3616718e416fd9e892db055c66d142a3a9e809faf8a1fccee9205a1d8f24d720ed5ff035ea377c73d1bc8f64598ea2afc1ffda80ab226c1e4597d19bd7
SSDEEP

384:2jSjLNGd0jedoiKgF9G+uOTFenU0o5QUoYbnD+:2m4Qgj5QpEnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_2820.exe

Files

Sourceforge_2820.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ