Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_3797.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Sourceforge_3797.exe
Resource
win10v2004-20231025-en
General
-
Target
Sourceforge_3797.exe
-
Size
128KB
-
MD5
288e8ac68818a2e232f803bb71e660ff
-
SHA1
6d0f1a761198294df02808172bf8325d7df0200b
-
SHA256
44df067d527b05e44643d610a0fe6151605d8fcf75b8a25b373ec70e13369449
-
SHA512
e7433a6f6abfeac45543411e8ef78ffc8260e7d2291a1098b34ffcf4aef78e683fc4bad0b394666183c038e0ae1acb33d0fe173cbd2b59a89d76bacf1b06c593
-
SSDEEP
1536:r0rL/9zPHoNnwHIDR6qWWTyOi0TJ7DMj8hckA5szR4/:AthjKm/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_3797.exe
Files
-
Sourceforge_3797.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ