ScreenShareServer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ScreenShareServer.exe
Size

951KB
MD5

b0af26971cbd134d97ab430e34d6599d
SHA1

97a125b0c47ddffd10b34d195fffe970ac3a94fa
SHA256

c6db11cd81ef5851d4acf60dfbc4d5bbf9538e914d6a180e6d895a32c1d6c1ba
SHA512

c3b42f20c5f62f4fd786bad9c31a0daa2360658f1d56facc4f9ab126751d54f819108cf75c3782a2fbd98662b1916adeade1f129913d4d9aa2d207948a9d0c00
SSDEEP

24576:mG1IP8UA0lGYzUAxw+Jjxq5z+eSgJM1wQ7rWUiyzPDpMIxFtU5Z1Z7x:muIxtgNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ScreenShareServer.exe

Files

ScreenShareServer.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ