Static task
static1
Behavioral task
behavioral1
Sample
zAuthServer.exe
Resource
win10v2004-20220812-en
General
-
Target
zAuthServer.exe
-
Size
12KB
-
MD5
fe9f86342010abbfb76d3616764d317c
-
SHA1
d50a92479a1b6366c1472762cfba3eee07d1ed5b
-
SHA256
9c2c5414354c3d3f037e9c2b29a13f7848f03db799e72ca03d8661cb0bfa15d7
-
SHA512
a49b4a88dc4c2921b0889b19574dfc442433de24b53630e8b0bd9b2ca0664a2fe98d95dffd0e29c0f9c680f463da6d65b202ce9dc8cbb1e5a82ef5977a6057b0
-
SSDEEP
192:5m+3jZjnIfSI3DSJ45BM068K1eOaItRQmoGlHjyw73y7Sao:Y+3j5MSIRn68K1eOaIvIIHGe3Da
Malware Config
Signatures
Files
-
zAuthServer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ