Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10v2004-20240709-en
General
-
Target
Server.exe
-
Size
1.4MB
-
MD5
600f9de3fc5bc94d5c6684b64d93047a
-
SHA1
e9b96dc1ca4862bb69f41af3f5299fa308422043
-
SHA256
ffa74d638038c11570f25732bc48cde2967d67ebae807c7d3109ad11c0c26d93
-
SHA512
9ef46eb112e4465d0f35e4e0a31e2edc0b72233b64c3bff3482ef0550529ea591d08a61574bc15ef39078a8d7b7d2428691c014002d321d5a5f39f51654202e3
-
SSDEEP
24576:iVYVHN3tWeq0uWvHIQ82/aBNhSsD4EGkUz0T0/9BtbS9ndwzOqBuhEyRtdmomlEC:399ByeuzdmomSkmmtEQQQUmemmmmmmIH
Malware Config
Signatures
Files
-
Server.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ