ServerManager[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ServerManager.exe
Size

371KB
MD5

3d769b5e82113bb29c224560b40b98f0
SHA1

2d975066331361c5e91e3800765d615a1af24889
SHA256

c2b5825e1dacfd9baf4a05ae31b06f77a1c235a1d1d0ce5965f45a23116ad426
SHA512

1656e18bfd3a3d04d7d3a15034d05ef880aaa54bb2e76c429e280feba95b6aa096136b22b27462f17de3d0817a121209713b3b504476769182eb74ecede8ac55
SSDEEP

6144:fe1nVj4QO9bNYupSM6lX0W1yluSvKrnM14K7M6lX0WM:fe1nVj4Q9M690WjSvfFM690W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ServerManager.exe

Files

ServerManager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Dropbox\C# Projects\TF2 Server Manager\ServerManager\obj\Release\ServerManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ