Sourceforge_469[.]exe | Triage

Sharing

General

Target

Sourceforge_469.exe
Size

10KB
MD5

a195e7505c96bbb9897d3b6284946a67
SHA1

d2907c05b69ffb7c99fa85c4a7c0504067c62774
SHA256

8436b46777e6db6b5c677f71b72382e3263d11958f8594a275220c6ff1d9e707
SHA512

6b62dd837683ec5a15f4bfc57c33efc599e711b5ed6645b39891e1bdb7af5c075b8f262bdd84548b31569a166f7405b83ebc7b6256e0d2b197f4f4b0f66e1a64
SSDEEP

96:1tKDDNSZcF26DrhD+8lZ7VGl0kQ5eIViL4OthvRT6NOPb6T0/lmCzNt:7KDDNSmh+8lbGGkQ5bcJRT6xIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sourceforge_469.exe

Files

Sourceforge_469.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ