iCUE HTTP Server[.]exe | Triage

Sharing

General

Target

iCUE HTTP Server.exe
Size

158KB
MD5

8960260b3fc20ca1672e3c552182f167
SHA1

82ec791ddf39e6493c7cffe1d243a86a31c2b2c8
SHA256

dec0061f2eb3b02fbf291da67235f1b8e6d35da7cedd84326ebfe4d8facb2930
SHA512

46688db47b09d8c904d71a9acfb17ad6747494b28b1848f5f1b4950d74d3fe099a20c2952ad291568d36a4fe594a6dd77e73f95b83ab18d6f935b60db03b8fc2
SSDEEP

3072:KzKDdp/4F2RjpIcqzGz+TgO6VExzMm5p:Ewdd4YkzI+cqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iCUE HTTP Server.exe

Files

iCUE HTTP Server.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Users\Zac McDonald\Documents\Visual Studio 2017\Projects\iCUE HTTP Server\iCUE HTTP Server\obj\Release\iCUE HTTP Server.pdb

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ