Sourceforge_3089[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_3089.exe
Size

305KB
MD5

317c38d1213a16480ea367b7ab6bf299
SHA1

dfe7a254878fe7961d5704afcabd7c380cd7e4a6
SHA256

a4b6d488d2ca6eea6817477924d4057ac4df0077de824f42622cf7e9ffa1d334
SHA512

01785e50c126c62eb666e586ae554ce8731e1b1c8526df4ae3b905ef6f0121b4d31c4ebc250323dabac06a3d239831fcafe15a45b39978f268d73c390f8922be
SSDEEP

6144:VQiRg4oD8bnRiCTbNcnftTbggb/Bk/QlKbKaO2Hl9EogbdU7HkrSSa3BYCfeWNUx:VQiRg4oobnRiccna1QM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_3089.exe

Files

Sourceforge_3089.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ