servereror[.]exe | Triage

Sharing

General

Target

servereror.exe
Size

264KB
MD5

542b9fa0e7c1ebf250ce1a62cf7a330f
SHA1

12edc6f8dee6af48cf1c05fe30a5fb70528a0673
SHA256

c845e4c23760fdf4790512292c37edff3e0c7bffa4b2013b42d0025a4a678151
SHA512

88ff43615c18750e9b0e6b5e64af4db897d71087d525b85a93636c9b879c095cb37b42abddded1e0ee1be7e73bbc1dd1f228977cf50bc6210890e8da35d7eae6
SSDEEP

3072:q6hSrbZO8RnLIDbNu3cNkipXlL6zslKWveIiHPhgh8a+VPhgh8a+rHmB:qqyZOOnLqM3c6wVL62KtXghcghMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
servereror.exe

Files

servereror.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ADMIN\source\repos\ARES RAT\StubARES\StubARES\obj\x86\Debug\StubARES.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ