Static task
static1
Behavioral task
behavioral1
Sample
Sourceforge_3980.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Sourceforge_3980.exe
Resource
win10v2004-20231023-en
General
-
Target
Sourceforge_3980.exe
-
Size
60KB
-
MD5
8b36f3b5177bd3f53588eb1f0d74a9e5
-
SHA1
274b63a95e96ef6ef6cf7b326e6cfdff6eea5e79
-
SHA256
16895cdc1fd860eadea96d71921b79a883b3f8b9244db4816e22955039a56669
-
SHA512
f6e9b2e4c8c41e1054257695d5a04755c61726abac01818ef0506a2361c36b15a12fc26ac095ac9321643a4a01db4a0451fd70184da9bb48cf0c13ee95855f40
-
SSDEEP
768:lUd+F9zVQrYnPSZGv/3YxWV0rC3Cx0r8zG1IdQnKZ6nn3w+Mj9NEuPnn3:u092r8C+MBN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sourceforge_3980.exe
Files
-
Sourceforge_3980.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ