Static task
static1
Behavioral task
behavioral1
Sample
ser.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ser.exe
Resource
win10v2004-20230703-en
General
-
Target
ser.exe
-
Size
916KB
-
MD5
c677674b6887897d1112a53318acdb8f
-
SHA1
877979d6bbf86b2aba313b196127296fe8e44811
-
SHA256
bf6006e402d90d0ab1cb6d2a87e2ed015ed654e877c433de881f11e207c8f8ac
-
SHA512
a402e9b9ace8ed0f1ebe8f0599c0243494e16c951bd47f3a85bceaf93ad5817fa5ec87cd90faa127a5e84df3b23eb4368d443a9e1015b6f1946c1f1bdb1974f0
-
SSDEEP
24576:hWIYZFEQZGXcZCpW1vTi+Tul5jFDDCZsn:hH4TcsoMqBCGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ser.exe
Files
-
ser.exe.exe windows x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 128KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ