server[.]exe | Triage™

General

Target
server.exe
Size 281KB
Sample230309-jgzcesab2w
SHA256 aa96b7f6516f3f8d7d63d61a30b3af156b92b3e8dace05c8953dcf82ac96a3c6
MD5 02ff268fc798c2939c2f4f968b917789
SHA1 6ae2f7e086b64fed10b5098369ef517bf7cce254
SHA512 275c0bd9a5ab6ded9264e96735b65663b263a02741a2965f81841b16a7325760b44bf34c917d00d3b33f0bc49059fc4eaa88ddf8664b41e3ab8af6704c25f629
SSDEEP 3072:SJPgzJLfPmIGK2EYIWbwtFtmjZ4RfEvkqkaBuERzLBvqWQw1/JTf7mgTsp1+Hc:Ig9LfXst0t3CS5EZ1RzlvU4jwrF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 281KB

server.exe

IMPHASH f7c5b620acbcc0f29abfcbc3407e0336
SHA256 aa96b7f6516f3f8d7d63d61a30b3af156b92b3e8dace05c8953dcf82ac96a3c6
MD5 02ff268fc798c2939c2f4f968b917789
SHA1 6ae2f7e086b64fed10b5098369ef517bf7cce254
SHA512 275c0bd9a5ab6ded9264e96735b65663b263a02741a2965f81841b16a7325760b44bf34c917d00d3b33f0bc49059fc4eaa88ddf8664b41e3ab8af6704c25f629
SSDEEP 3072:SJPgzJLfPmIGK2EYIWbwtFtmjZ4RfEvkqkaBuERzLBvqWQw1/JTf7mgTsp1+Hc:Ig9LfXst0t3CS5EZ1RzlvU4jwrF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeA GlobalAddAtomA InterlockedIncrement VerSetConditionMask FindCloseChangeNotification FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA FormatMessageA GetWindowsDirectoryA GetDateFormatA FindResourceExA SetCommConfig GetFileAttributesA lstrcpynW GetBinaryTypeA IsDBCSLeadByte GetStringTypeExA LCMapStringA EnumSystemLocalesA GetConsoleAliasExesLengthA GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA WriteConsoleA LocalAlloc GetFileType OpenJobObjectW FoldStringW EnumDateFormatsA CancelTimerQueueTimer GetStringTypeW OpenEventW FindAtomW GlobalReAlloc SetLastError GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleHandleA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA HeapSize

user32

RegisterClassW ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA

Sharing