Static task
static1
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10-20240221-en
General
-
Target
Server.exe
-
Size
32KB
-
MD5
21746922c264036059c7007bc397933b
-
SHA1
52ad3139cac4e5f82c9c927a7978499802471b30
-
SHA256
bbbe96828314e1f65014b2b58ccccb3b8c1b92a30cd17a7ecd60990a19a2282d
-
SHA512
25dc897ed22c061ba6d9ece89192eb79d595e69055030c96b165753f3906607acdc93fb8bc0284a55ff0e7fe1f191d36b952c9390d7cae3e0d79f5f5de9b690f
-
SSDEEP
384:QLburjT8ycT4kO9OLZWahNz5WusYbOUuxLnyvhi2Vg6yqvEkLDOHYCFXPzlpmIMp:OCrjT8WkO9KJxpVfPmF7m71x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Server.exe
Files
-
Server.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ