Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20231215-en
General
-
Target
Server.exe
-
Size
1.0MB
-
MD5
a76ef15e10c65469b54e715fbfd9404f
-
SHA1
77484ca453eabc34a1d3da14fdca921f866e81c3
-
SHA256
2d316994a8c377798cf0f623b76c560cb8c9e717536328f31f860697a04ec0d1
-
SHA512
7fb40e10d5ae3bafb06c828bb9f502507c4f36c34ec892a200fc72e8dad403cddf209b2c4190efd79a7c22e1cde3a89e1e75ff549434d10de0640fb7cbf21458
-
SSDEEP
24576:ocA4sbI9PFC5lmmomlEkmmsEnE7E7E7EUmemmmmmmIDmeQaKS:o14f1FclmmomSkmmtEQQQUmemmmmmmIJ
Malware Config
Signatures
Files
-
Server.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ