servoces64[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

servoces64.exe
Size

16.8MB
MD5

540c3c9ae1b97353b49de9a216532d72
SHA1

bda2524601ab7cbe91287c9095f743acae55441a
SHA256

0d2c84253c9a3ab2339605c4c54b1e52e8ffbb192d0b1a050b27096cdaf2f4d6
SHA512

1625d62a1614d940ab44cc9c62004f32da85712d16fbeb1be015838151259f87bbfdb74387ad290db37e62d0a165e4e8c826a001b70918eb2f9111144c739d88
SSDEEP

393216:OKe0h1uQjMppTvR6USajrgzKHc9bqNJy:TUQjopzR6Unjrrce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
servoces64.exe

Files

servoces64.exe
.exe windows:6 windows x64 arch:x64

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ue[
Size: - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.>P-
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

./ub
Size: 16.8MB - Virtual size: 16.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7b7b517cf49febe9724e1b897a98881

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

Sections

.text Size: - Virtual size: 45KB

.rdata Size: - Virtual size: 16KB

.data Size: - Virtual size: 5.2MB

.pdata Size: - Virtual size: 420B

.00cfg Size: - Virtual size: 16B

.tls Size: - Virtual size: 16B

.Ue[ Size: - Virtual size: 7.4MB

.>P- Size: 2KB - Virtual size: 2KB

./ub Size: 16.8MB - Virtual size: 16.8MB

.reloc Size: 512B - Virtual size: 288B

.text
Size: - Virtual size: 45KB

.rdata
Size: - Virtual size: 16KB

.data
Size: - Virtual size: 5.2MB

.pdata
Size: - Virtual size: 420B

.00cfg
Size: - Virtual size: 16B

.tls
Size: - Virtual size: 16B

.Ue[
Size: - Virtual size: 7.4MB

.>P-
Size: 2KB - Virtual size: 2KB

./ub
Size: 16.8MB - Virtual size: 16.8MB

.reloc
Size: 512B - Virtual size: 288B