Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_3078.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_3078.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_3078.exe
-
Size
16KB
-
MD5
b801d84fcd91c15952434743217b51cc
-
SHA1
d2b4a952078de8407c9679f0c610f890f7d53980
-
SHA256
d964c8e18543523a94b0862db4ec42ed728e69a3cc16752f5b7e8a567cc38622
-
SHA512
58cc701ae71880f87f7b04b93a5b1fa4ef98edd81c1811c735087bcc4acdcb7a91e345e3fee45c8a1485e707531b140ff99abdf703713639dfae3479a7e45447
-
SSDEEP
48:6VF3SgHcBQo+GO/ZvyxHTeLUjTKyYrQ+ivvrXBsmOPtlG0x3ELd5dpH:oSgHc+rEFqubYcnv4G0BuD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_3078.exe
Files
-
Sourceforge_3078.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ