Static task
static1
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10v2004-20240704-en
General
-
Target
Server.exe
-
Size
183KB
-
MD5
e3e4194b0faa007c8b0dd25c92513f14
-
SHA1
c23e30d9d4d1c17420402e0d0e90d2cc791d7e0b
-
SHA256
e80b6f2184368b34f314f4fd6544cc3185ec2f841e5670476222281d7b8dc984
-
SHA512
09c43a968b8fb98e121f14fc26a4c03e17f0f4a5660934e1840dde69ad3d205b652d533bcca075e46ed78673cd5932f2ef00602b85d87ba468063ab03b69a6b1
-
SSDEEP
3072:VurlxKcmnZde2vBVQF4EWjFRA229YvepcCBKX3pr:ArladeAVQF4EWx92iepcCBKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Server.exe
Files
-
Server.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ