Static task
static1
Behavioral task
behavioral1
Sample
DSTService.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DSTService.exe
Resource
win10v2004-20230220-en
General
-
Target
DSTService.exe
-
Size
17KB
-
MD5
fb317a635bf08f3f762819a2ce10a578
-
SHA1
af621a7bf5106b5d61c55754a6a7f7ef96420853
-
SHA256
32c919292dc79f388286aef42720e1525caf20cf864c9a11113c5b7a8cf0bd0e
-
SHA512
8ff5d6b9f13773a51f71b934bad2b1ff40d4dc81113a3f7c5469af40d623e8096ddab8c7bc63a646ee748bc4ce508541543b59a209a92af0e42b7167bb275ebc
-
SSDEEP
384:ZNRVCuhl0f3pXtm0e57SdrNaJ3H1vqalOJCl:LDrQ9G5wrwBZKCl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DSTService.exe
Files
-
DSTService.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ