Static task
static1
Behavioral task
behavioral1
Sample
Server-protected.exe
Resource
win10v2004-20240419-en
General
-
Target
Server-protected.exe
-
Size
1.0MB
-
MD5
684302a248049271439024e7a10683be
-
SHA1
08ce5191c9dbb7d89e07c27d8d15a53089550e90
-
SHA256
bdc150b87f4909275385eb221e2d3bffbe808ebff9f83b25b4db1a476e65e365
-
SHA512
f3191554c5ebf6d36a57a44ae61fac327b92ac252e1a4a3a7ecfae1cd88584fa4540f010bcdfd5a06acd6dd52cfab478a76d0da69a31a94d9d4f7ae29956e980
-
SSDEEP
12288:i0wNJAs3TXJhNhYfVPnBbDIUgVjAvNqDB71tcjrE2e2JDvWC+83Gy2NR:WNJpT7YNZDIUOkvNqDboEh2Fv3fkN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Server-protected.exe
Files
-
Server-protected.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
nA3Z3Pb Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nA3Z3Pb Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
B17BB9F1 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ