Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_3839.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Sourceforge_3839.exe
Resource
win10v2004-20231020-en
General
-
Target
Sourceforge_3839.exe
-
Size
36KB
-
MD5
e4d0a39aee5c3eb1cab314d8214e7466
-
SHA1
b68b354718b80331a1cd1b217b4eac01208771e4
-
SHA256
f74c2f5c4b6cfb6f3833fe3559d02f799e9df9c619a8ca71a6f447f9bc658fff
-
SHA512
1c1f04940f1f5b5568f0fb60b01b843f168f081c47888a0644dcb25131203e8ea3b938d7d6ec029289f241f17e6bf9790e08e730151b5341709135888bf1368d
-
SSDEEP
384:IytxLndW6xZAKAwOuqYvP96uRDpqIBvP96uRDpqIOjI1bZu9DLORKh5pvkQUtEE+:9os/NOuHDdD8Iq9DTsI2Hs5aU7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_3839.exe
Files
-
Sourceforge_3839.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ