SpotifyServer[.]exe | Triage

Sharing

General

Target

SpotifyServer.exe
Size

621KB
MD5

c46587eb6c38c4ff2ff22a68a1465537
SHA1

df4b1c10c8c8ba5b24c92bbb8a6b1a51ac790534
SHA256

68db4aa89bc3d201ec3ced4a125fd4918fd111e5f4eff4b99c75fbb298d5eac6
SHA512

0daf8881770be3e4834156482acd0d7468c0b7d64c0871c0f31666c45d448c10f888805b76b6aa9b574cf6379ee4d8c68188245f95413470b0e09d688b42e6e7
SSDEEP

3072:5Ocq8RrQmPfSsP0rMI/1DNjUjeKUlFanhFZfp2u3BsmPfSfP0rMI/1DNjU24nn0:NrRfydBjMeK8chF9RhfRdBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SpotifyServer.exe

Files

SpotifyServer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Trippy\source\repos\Spotify Checker by KniX\Netflix Checker by KniX\obj\Debug\Spotify Checker by KniX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ