Static task
static1
Behavioral task
behavioral1
Sample
TeamServer.dll.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
TeamServer.dll.exe
Resource
win10v2004-20231215-en
General
-
Target
TeamServer.dll.8
-
Size
11KB
-
MD5
b4b3391f146e9b5ad570c4daa3f56927
-
SHA1
36fa6deec36c16077fe53ead7d5c785ea134d29e
-
SHA256
1228dd63923a328e80659b975c2ef035c80d7475902b5daec5a38d6855b209fa
-
SHA512
beb838981c1d876fa96dafe8f0584507a362f020d484c4dbac3cac713147ab78a7ef9365dda6eda1a33514581e91cbb3f5092f39d7784c165aea3adc85d68b31
-
SSDEEP
192:nJTAsyQk2x4xHl5p8UpWkEpNtxmBB5QHO4FMF+d:CR2Mp8Up2NTmZQHOd+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TeamServer.dll.8
Files
-
TeamServer.dll.8.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.mvid Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ