Sourceforge_3425[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Sourceforge_3425.exe
Size

4.8MB
MD5

2fabd19e992479728887f353ef2d7ec3
SHA1

ebda65b20e32c0bf5a127776d1b0a9661c68111c
SHA256

8bbbc7e8e4c497c9a8f39b9bcec39338f2b33ff0d45a3617c32e26afe5fe0bcd
SHA512

1b7e3e6ae50b58fa8730d0925af35604b6446752c5062bc0f4d4dae4eb936b408f6cc3da89eb0b6f3615ce8c22c89dd97d17f11bb2e9d2ec51eb1ad40e640a42
SSDEEP

49152:mYcmYL9g5b0wUXgqVyROLe9AkyZL+srdMlj+TUgtdwk9OZ6YqkqkXDP/pSL:mWYS5sPDkZpG

Score

1^/10

Malware Config

Signatures

Files

Sourceforge_3425.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6a:0b:99:4f:c0:00:4a:ab:11:df:8a:dc:e1:e0:27:aa
Certificate

Issuer

CN=Microsoft Test Root Authority,OU=Copyright (c) 1999 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/05/2010, 07:00

Not After

29/12/2020, 07:00

Subject

CN=Microsoft Test PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:21:dd:62:6c:12:71:c1:5d:6f:00:01:00:00:00:21
Certificate

Issuer

CN=Microsoft Test PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/01/2014, 23:17

Not After

03/01/2018, 23:17

Subject

CN=MSIT Test CodeSign CA 2,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:00:69:a7:03:28:54:4a:61:ae:97:6c:2f:00:03:00:69:a7:03
Certificate

Issuer

CN=MSIT Test CodeSign CA 2,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

02/02/2017, 21:48

Not After

03/01/2018, 23:17

Subject

CN=VS Bld Lab

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:01:46:5c:8d:1b:85:69:1d:5a:c0:ad:ae:00:01:01:46:5c:8d
Certificate

Issuer

CN=MSIT Test CodeSign CA 3,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

10/02/2016, 22:39

Not After

04/02/2018, 18:02

Subject

CN=VS Bld Lab

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Testing Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/02/2014, 18:02

Not After

04/02/2018, 18:02

Subject

CN=MSIT Test CodeSign CA 3,0.9.2342.19200300.100.1.25=#13077265646d6f6e64,0.9.2342.19200300.100.1.25=#1304636f7270,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:c2:94:a3:0d:34:eb:0d:a0:8c:a5:87:31:98:31:9c:68:8c:0d:ce:60:bb:a1:fa:f7:48:f4:72:10:3b:65:9c
Signer

Actual PE Digest

2b:c2:94:a3:0d:34:eb:0d:a0:8c:a5:87:31:98:31:9c:68:8c:0d:ce:60:bb:a1:fa:f7:48:f4:72:10:3b:65:9c

Digest Algorithm

sha256

PE Digest Matches

true

fd:a0:19:59:50:48:0d:50:7d:08:da:29:43:d9:42:7c:71:4d:03:35
Signer

Actual PE Digest

fd:a0:19:59:50:48:0d:50:7d:08:da:29:43:d9:42:7c:71:4d:03:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

6a:0b:99:4f:c0:00:4a:ab:11:df:8a:dc:e1:e0:27:aaCertificate

Key Usages

33:00:00:00:21:dd:62:6c:12:71:c1:5d:6f:00:01:00:00:00:21Certificate

Extended Key Usages

Key Usages

77:00:69:a7:03:28:54:4a:61:ae:97:6c:2f:00:03:00:69:a7:03Certificate

Extended Key Usages

Key Usages

43:01:46:5c:8d:1b:85:69:1d:5a:c0:ad:ae:00:01:01:46:5c:8dCertificate

Extended Key Usages

Key Usages

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1aCertificate

Key Usages

2b:c2:94:a3:0d:34:eb:0d:a0:8c:a5:87:31:98:31:9c:68:8c:0d:ce:60:bb:a1:fa:f7:48:f4:72:10:3b:65:9cSigner

fd:a0:19:59:50:48:0d:50:7d:08:da:29:43:d9:42:7c:71:4d:03:35Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.8MB - Virtual size: 4.8MB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

6a:0b:99:4f:c0:00:4a:ab:11:df:8a:dc:e1:e0:27:aa
Certificate

33:00:00:00:21:dd:62:6c:12:71:c1:5d:6f:00:01:00:00:00:21
Certificate

77:00:69:a7:03:28:54:4a:61:ae:97:6c:2f:00:03:00:69:a7:03
Certificate

43:01:46:5c:8d:1b:85:69:1d:5a:c0:ad:ae:00:01:01:46:5c:8d
Certificate

33:00:00:00:1a:c9:40:14:bc:22:2d:4a:25:00:00:00:00:00:1a
Certificate

2b:c2:94:a3:0d:34:eb:0d:a0:8c:a5:87:31:98:31:9c:68:8c:0d:ce:60:bb:a1:fa:f7:48:f4:72:10:3b:65:9c
Signer

fd:a0:19:59:50:48:0d:50:7d:08:da:29:43:d9:42:7c:71:4d:03:35
Signer

.text
Size: 4.8MB - Virtual size: 4.8MB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B