C:\Users\Admin2\Documents\Visual Studio 2015\Projects\ServerVisibilityChecker\ServerVisibilityChecker\obj\Release\ServerVisibilityChecker.pdb
Static task
static1
Behavioral task
behavioral1
Sample
51db66dccd2fca337387184f7fb343b2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51db66dccd2fca337387184f7fb343b2.exe
Resource
win10v2004-20240221-en
General
-
Target
51db66dccd2fca337387184f7fb343b2.bin
-
Size
3.0MB
-
MD5
51db66dccd2fca337387184f7fb343b2
-
SHA1
5a5b239ad5011810affc2a061163f185743e514d
-
SHA256
d0a5f88ad264c9d869a50cb53c0332327bf4c0de4e4b230f9cae072b3c2a6c18
-
SHA512
382ed5daf9e75896b77bc5e314a9d4f4e0306619bef41a14bc4898d8649a4eb6155019245e55fa97273b8c1ab6db1c5a21780b45491ff4b793c41c98c9926a47
-
SSDEEP
12288:HdJeIHzF2qFiYIdJeIHzF2qFiYvdJeIHzF2qFiYVdu2IHzfFT8m2:HygzF2gEygzF2gDygzF2gJbgzfFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51db66dccd2fca337387184f7fb343b2.bin
Files
-
51db66dccd2fca337387184f7fb343b2.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 773KB - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ