ServerInfo[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ServerInfo.exe
Size

496KB
MD5

652b1fc168062a7992100805461b4b15
SHA1

26bb3da00404ab7e6497a14525df8add07769207
SHA256

05c7548c80dbeb8cf579c4de77a588a43adb7d9075fe9b8bbc2e3a86130ac01f
SHA512

8ffa0f157003ad4100a34c65cc966e6c9818e6504440fb980d5a7934644d0ebc3370cbbf408bc40468870cb627aef7729ed005cd7dc6254dab3bfbb4208c7ed3
SSDEEP

6144:oW9OTR6F7ATY//ncSNO9wmeEP2EHqOUxIKA:NgTwATY/PcSNO9wmeEP2EHqOUxIv

Score

1^/10

Malware Config

Signatures

Files

ServerInfo.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:c4:7c:eb:ff:cd:c0:b2:77:07:2d:1d:b2:ea:8e:da
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

11/04/2023, 00:00

Not After

11/05/2026, 23:59

Subject

CN=Siemens Industry Software Inc.,O=Siemens Industry Software Inc.,L=Plano,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:57:47:65:b2:67:ae:13:44:94:a1:de:08:59:44:cf:96:f5:38:73:e6:69:2e:4a:03:3b:06:83:c3:3d:22:be:fd:5f:d4:c1:46:d7:42:0c:37:5e:e3:0b:a2:27:27:d2:93:74:f1:b2:53:e1:ef:d9:79:d2:bc:7d:3e:44:4e:43
Signer

Actual PE Digest

21:57:47:65:b2:67:ae:13:44:94:a1:de:08:59:44:cf:96:f5:38:73:e6:69:2e:4a:03:3b:06:83:c3:3d:22:be:fd:5f:d4:c1:46:d7:42:0c:37:5e:e3:0b:a2:27:27:d2:93:74:f1:b2:53:e1:ef:d9:79:d2:bc:7d:3e:44:4e:43

Digest Algorithm

sha512

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:c4:7c:eb:ff:cd:c0:b2:77:07:2d:1d:b2:ea:8e:daCertificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

21:57:47:65:b2:67:ae:13:44:94:a1:de:08:59:44:cf:96:f5:38:73:e6:69:2e:4a:03:3b:06:83:c3:3d:22:be:fd:5f:d4:c1:46:d7:42:0c:37:5e:e3:0b:a2:27:27:d2:93:74:f1:b2:53:e1:ef:d9:79:d2:bc:7d:3e:44:4e:43Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 481KB - Virtual size: 481KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:c4:7c:eb:ff:cd:c0:b2:77:07:2d:1d:b2:ea:8e:da
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

21:57:47:65:b2:67:ae:13:44:94:a1:de:08:59:44:cf:96:f5:38:73:e6:69:2e:4a:03:3b:06:83:c3:3d:22:be:fd:5f:d4:c1:46:d7:42:0c:37:5e:e3:0b:a2:27:27:d2:93:74:f1:b2:53:e1:ef:d9:79:d2:bc:7d:3e:44:4e:43
Signer

.text
Size: 481KB - Virtual size: 481KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B