Static task
static1
Behavioral task
behavioral1
Sample
server.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
server.exe
Resource
win10v2004-20230621-en
General
-
Target
server.exe
-
Size
48KB
-
MD5
5ab2b3751d53c6d4077ac0b9e3f55801
-
SHA1
4f3f56c54afd5e7993653b41c557a1772c32fceb
-
SHA256
4b60a289b2df3d1facf27ee7590578fe2644bd957c8daf0cf7bdcb0ae64d8154
-
SHA512
eca2973c8bcb0ee188d2e390395e3a0b3a5d9b9741fbcd829b911df5cde005709a40910b18c484e1cbd6570b3dbd475e681275579a25606ccd8368396250592e
-
SSDEEP
768:jiw8eRuLwfBuNkowmFwohHptnDhPdQzQbCMV4r6+jHYu:ZJpuNO/Ip1lUQbqr6MH5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource server.exe
Files
-
server.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ