Static task
static1
Behavioral task
behavioral1
Sample
LoginServer4.8.exe
Resource
win11-20231215-en
General
-
Target
LoginServer4.8.exe
-
Size
31KB
-
MD5
af1e471c85b43bdc483cb2041b586e53
-
SHA1
b9221817b9a8efbc8ad03e9d45fd7b6fa0360eca
-
SHA256
5f5ada28697fc7b728132229b753972797967f43e8dea70efe65e8455d6700fc
-
SHA512
76bb06d8856c3ad8123480b90f9caa12e8a4e9a1e4959f8ffe9e6deccc89e356ea3ae0de18a72edbaa8907ae641518a50166c7f4a462717af737a3b240bb3de6
-
SSDEEP
768:QdBWJpYDvx2AZg3dZ3+fMfWQ0vPlHTR7Dn:TJSDo/dVV0v1h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource LoginServer4.8.exe
Files
-
LoginServer4.8.exe.exe windows:4 windows x86 arch:x86
b876114877b29a61f9955d83081f159a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord516
Sections
.MPRESS1 Size: 25KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE