silviozas-server[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
silviozas-server.exe
Size 96KB
Sample260901-znk2daef96
SHA256 d38d9d1de42aa898c563011080db21600f348085cb24aa52e026a614e4bb4dce
MD5 f23aa227290da49c173fbeb11fe1d562
SHA1 e1c521e648be712d3466a6b95833431dffc5021d
SHA512 5530e7f71d54c29e61bdfde02a476f2763b2a29d13758c3b2e5326623301ab4f8b676ec5d1e93126f36545483760e20c2ee3ad52dc2efdc615b74183e0abca05
SSDEEP 1536:DV9BI7Elj66/5gVRclGuqEc66jcafgUAtiZCQOMonQkOnkw741ZC:Dy7y66oRSG5Ec66XtZEHk4D
TLSH
T1C8A35D29DE55217ED26AD878CA534807EB72BC4A03716FDF57505DE20E26AE09F3F201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
silviozas-server.exe

File Explorer

silviozas-server.exe

.exe 96KB

silviozas-server.exe

IMPHASH ea3dfc7f9ffbf1297c1d580e0d879501
SHA256 d38d9d1de42aa898c563011080db21600f348085cb24aa52e026a614e4bb4dce
MD5 f23aa227290da49c173fbeb11fe1d562
SHA1 e1c521e648be712d3466a6b95833431dffc5021d
SHA512 5530e7f71d54c29e61bdfde02a476f2763b2a29d13758c3b2e5326623301ab4f8b676ec5d1e93126f36545483760e20c2ee3ad52dc2efdc615b74183e0abca05
SSDEEP 1536:DV9BI7Elj66/5gVRclGuqEc66jcafgUAtiZCQOMonQkOnkw741ZC:Dy7y66oRSG5Ec66XtZEHk4D
TLSH
T1C8A35D29DE55217ED26AD878CA534807EB72BC4A03716FDF57505DE20E26AE09F3F201
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

62192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

WSASendTo WSARecvFrom WSAGetLastError WSACleanup WSAStartup socket setsockopt getsockname ioctlsocket htonl closesocket bind __WSAFDIsSet ntohs ntohl htons select

winmm

timeGetTime timeBeginPeriod timeEndPeriod

msvcp140

?good@ios_base@std@@QEBA_NXZ ?_Xout_of_range@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Query_perf_frequency _Query_perf_counter ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

kernel32

SetUnhandledExceptionFilter GetTickCount64 SetConsoleTitleA GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead Sleep

vcruntime140

memcmp memcpy memmove memset __std_exception_copy __std_exception_destroy strchr __std_terminate __C_specific_handler __current_exception __current_exception_context _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vfprintf __stdio_common_vsprintf fread fopen putchar fgets fclose __p__commode _kbhit __acrt_iob_func setvbuf

api-ms-win-crt-heap-l1-1-0

free malloc _set_new_mode _callnewh

api-ms-win-crt-runtime-l1-1-0

abort terminate _register_thread_local_exe_atexit_callback _c_exit __p___argv __p___argc _exit _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit exit _cexit _seh_filter_exe _set_app_type _initterm _get_initial_narrow_environment _initterm_e

api-ms-win-crt-convert-l1-1-0

atoll

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale