General

  • Target
    Sarv-0.2.0-rc.1-windows-x64-setup.exe
  • Size 21.0MB
  • Sample261113-vcvdfsys6n
  • SHA256 c58c99ee22d89012a2250d2716993180bd6d497f2d0d7a124b27de1873eae0b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 36 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Sarv-0.2.0-rc.1-windows-x64-setup.exe
    .exe 21.0MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • LICENSE
    33KB
  • Sarv.exe
    .exe 44.4MB
  • WebView2Loader.dll
    .dll 157KB
  • icon.ico
    10KB
  • libbrotlicommon.dll
    .dll .js 136KB
  • libbrotlidec.dll
    .dll 58KB
  • libbz2-1.dll
    .dll 106KB
  • libcairo-2.dll
    .dll 1.2MB
  • libcairo-gobject-2.dll
    .dll 30KB
  • libdatrie-1.dll
    .dll 34KB
  • libexpat-1.dll
    .dll 231KB
  • libffi-8.dll
    .dll 38KB
  • libfontconfig-1.dll
    .dll 496KB
  • libfreetype-6.dll
    .dll 788KB
  • libfribidi-0.dll
    .dll 150KB
  • libgcc_s_seh-1.dll
    .dll 145KB
  • libgio-2.0-0.dll
    .dll 1.8MB
  • libglib-2.0-0.dll
    .dll 1.5MB
  • libgmodule-2.0-0.dll
    .dll 22KB
  • libgobject-2.0-0.dll
    .dll 349KB
  • libgraphite2.dll
    .dll 163KB
  • libharfbuzz-0.dll
    .dll 1.8MB
  • libiconv-2.dll
    .dll 1.1MB
  • libintl-8.dll
    .dll 291KB
  • libpango-1.0-0.dll
    .dll 424KB
  • libpangocairo-1.0-0.dll
    .dll 81KB
  • libpangoft2-1.0-0.dll
    .dll 109KB
  • libpangowin32-1.0-0.dll
    .dll 108KB
  • libpcre2-8-0.dll
    .dll 690KB
  • libpixman-1-0.dll
    .dll 723KB
  • libpng16-16.dll
    .dll 253KB
  • libstdc++-6.dll
    .dll 2.5MB
  • libthai-0.dll
    .dll 70KB
  • libwinpthread-1.dll
    .dll 71KB
  • sarv-agent.exe
    .exe 557KB
  • zlib1.dll
    .dll 186KB

Sarv-0.2.0-rc.1-windows-x64-setup.exe

  • IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
  • SHA256 c58c99ee22d89012a2250d2716993180bd6d497f2d0d7a124b27de1873eae0b0
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13709
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths