server[.]exe | Triage™

General

Target
server.exe
Size 311KB
Sample230306-26tscaeg2y
SHA256 fc3e7ff40a45bccd83617ea952eccdfc93301c6673cce8de33b4bf924b8957d9
MD5 9390d0d62ea148b02178682114e49bc7
SHA1 d6c55c43aacb6cc7fde55817747a6dc7f53df51c
SHA512 d3c7f6f11e43af8d902ae7af89776a15628e0afe0c7147f92999e128d95c9f219808f062947ac4b45134337de366c6c5efec80d3420aca8307b159677e576b37
SSDEEP 3072:B0IXPBdbWLT5TF9ChK0pMtplagPZhbYxGA4T7q2qlBfeeG55g2GWzLn8clInY9eY:3XPaLNunpbgwxm7q1lBfT2GW0Pc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 311KB

server.exe

IMPHASH ca50aa9f650b20f6c98fce17e6f7c1d3
SHA256 fc3e7ff40a45bccd83617ea952eccdfc93301c6673cce8de33b4bf924b8957d9
MD5 9390d0d62ea148b02178682114e49bc7
SHA1 d6c55c43aacb6cc7fde55817747a6dc7f53df51c
SHA512 d3c7f6f11e43af8d902ae7af89776a15628e0afe0c7147f92999e128d95c9f219808f062947ac4b45134337de366c6c5efec80d3420aca8307b159677e576b37
SSDEEP 3072:B0IXPBdbWLT5TF9ChK0pMtplagPZhbYxGA4T7q2qlBfeeG55g2GWzLn8clInY9eY:3XPaLNunpbgwxm7q1lBfT2GW0Pc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

27637

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeA InterlockedIncrement VerSetConditionMask AddConsoleAliasW UnlockFile FreeEnvironmentStringsA GetModuleHandleW GetCommConfig GetWindowsDirectoryA SetHandleCount FindResourceExA GetCalendarInfoW GetConsoleAliasExesLengthW FormatMessageW GetStringTypeExW lstrcpynW GetFileAttributesW WriteConsoleW IsDBCSLeadByte GetBinaryTypeW GetConsoleAliasesW SetLastError VirtualAlloc WriteProfileSectionA LoadLibraryA LocalAlloc GetFileType OpenJobObjectW FindAtomA FoldStringW EnumDateFormatsA GetStringTypeW OpenEventW GlobalAddAtomW GlobalReAlloc EnumSystemLocalesW LCMapStringW CreateFileA SetStdHandle GetConsoleOutputCP GetProcAddress GetDateFormatW InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree RtlUnwind RaiseException HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount LCMapStringA GetModuleHandleA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

GetIconInfo LoadMenuW RegisterClassW InvalidateRgn

gdi32

GetGlyphIndicesW

Sharing