Open Sourcer[.]exe | Triage

Sharing

General

Target

Open Sourcer.exe
Size

364KB
MD5

eec9442ac1c532d81a77a18da00102f8
SHA1

076797d416b170ec98177f7a4a91c0d2bc5b4a79
SHA256

809a761840c4da98ec5f352db7184168ce762c55585755416b6288a9c1808861
SHA512

cbfd428cdeecb0bc4ab9aab9049f19931f96cdbcf81a30087b8ef222777118e7ffc8b94edc095a77499dfe527032c1c0da5a9271a554e4c28a63e5183f129f24
SSDEEP

1536:nxdP1xpQa0bKLKmn4vCdXRnd47Mse/eeFjBY910QQa0blLKGn4vCoXRnd4mMse/V:xvsayQb/eeFjBWEaZwp/eeFjBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Open Sourcer.exe

Files

Open Sourcer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\aural\OneDrive\Desktop\PlayTheGame\Open Sourcer\Open Sourcer\obj\Debug\Open Sourcer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ