Sourceforge_3042[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_3042.exe
Size

1.3MB
MD5

8daa6ff0f00904c5fdba800610ffa1d9
SHA1

c614a58b07d719087a6e5892d39b79fd98194662
SHA256

0e91d35b211fbea213c69d465a782e4a198356a484fb798be95c2cb5de97bbef
SHA512

5f3c914666b2de86bc683b877e021377697df739f3eecf6a043898efd0d6a2b065dbe1d34f3d677cdce301b1f9df992c48309c31ed9362bf72d0f04584f8d46e
SSDEEP

6144:/5Kk7XOgqUT+vsuS5vsuSjrhNaRV5kbvsuS:/F7XyUX2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_3042.exe

Files

Sourceforge_3042.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 991KB - Virtual size: 991KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ