Static task
static1
Behavioral task
behavioral1
Sample
Server Crasher/Gtag Server Crasher/ServerCrasher.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Server Crasher/Gtag Server Crasher/ServerCrasher.exe
Resource
win10v2004-20230703-en
General
-
Target
Server Crasher.zip
-
Size
29KB
-
MD5
40b5fc96090554de237141cd82445345
-
SHA1
4631c08f6d001e825e5eded52b517a2ab0db53e9
-
SHA256
d5a557d08e0e3e035cce9ab05a9e350773740fda6f0fbe80a4aa8371f073d51d
-
SHA512
d602d41e5ccc8c61beaad22c8d042716af7549485fe66b12af1db0141b67090b551342fbf13cc23c0c64024446c3a591fe6df7a1b2069f125710d634aab5595d
-
SSDEEP
384:nF54cbz62APSweTZQkNK+I7JO6Bvohzy8dozhnPlRrWJpyUfKPfiUWLaAaqM2MFI:F5lz6yZDgr9OtA8doz2wfPN2Mfo6NK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Server Crasher/Gtag Server Crasher/ServerCrasher.exe
Files
-
Server Crasher.zip.zip
-
Server Crasher/Gtag Server Crasher/README.txt
-
Server Crasher/Gtag Server Crasher/ServerCrasher.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Server Crasher/README.txt