Static task
static1
Behavioral task
behavioral1
Sample
VNCsrv.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
VNCsrv.exe
Resource
win10v2004-20230220-en
General
-
Target
VNCsrv.exe
-
Size
278KB
-
MD5
c8820e55d813f7e0ed306624f52f99a6
-
SHA1
fd2c2100ac918b32062c8d3ebaa5381c2d19c5d0
-
SHA256
57eb12c5447a88c923c81dcc59363fba74c2c0cb3c5ec2e18b8b271a3ae0f192
-
SHA512
64e059a4fd5a63f3bdb7b85a67cbe3c2d9bfde5ca211e98b21d74870eebe8885ff6afc4eb48965dbb9a7cc25214d83319521adea28c5067952f0df5c859f67a6
-
SSDEEP
6144:yoM1Kta/3TH4vio34u0o7uiIUbTm1n7b23JHOA:yoWQxou0/ip3i7b23JHO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VNCsrv.exe
Files
-
VNCsrv.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WWX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WWX1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE