Static task
static1
Behavioral task
behavioral1
Sample
ServerHosting.exe
Resource
win10ltsc2021-20250113-en
General
-
Target
ServerHosting.exe
-
Size
183KB
-
MD5
eb6a72e187ab08c083fd5d4f34093e95
-
SHA1
5253a5f60fe7f9188b37041fb725ec84ccc39ffe
-
SHA256
5ce530ab5407bcd9dd3d8f0381227d62c3e3c0eb64e13ecd55088f5f47bdaf0e
-
SHA512
99eab46001751ae86c78fbd2d35f1aff1685d86bc2fd9be9d8cc570a2209eed5b2b68d575fa09e33c18e58596645a7a8806bfc20083355080dea97c0f37c1d59
-
SSDEEP
3072:HurlxKcWiZde2vBVQF4EWjFRA229YvepcCBKX4pn:OrluwdeAVQF4EWx92iepcCBKo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ServerHosting.exe
Files
-
ServerHosting.exe.exe windows:4 windows x86 arch:x86
Password: 1
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ