Static task
static1
Behavioral task
behavioral1
Sample
Server_protected.exe
Resource
win11-20240611-en
General
-
Target
Server_protected.exe
-
Size
1.1MB
-
MD5
f2ae44ecd391ca8f803a96360398cfa2
-
SHA1
dc0c69eb34984f6e2d113a35b055c144357e1157
-
SHA256
a5a847504cbc643ad813b58addde599f2897d55a4527d3818690a7d49cc04f80
-
SHA512
3ef633184d99191c347fe3f9869c14118df59477bd375e6e581790966a704ff894c8297c5feb18802c255e2842191cdabb26ea4cd08c75fb8fb94e80ee9af7f8
-
SSDEEP
24576:jf+CdBMbb1NDRxAqk/GIJ7t0mz9qhRj8PxVHkH+NxIWuLAHIQq:jftBqDKGIJ7t0hCvJUAIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Server_protected.exe
Files
-
Server_protected.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 64KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.#$%^&*( Size: 910KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE