server[.]exe | Triage™

General

Target
server.exe
Size 281KB
Sample230309-kb5spabd39
SHA256 dd0faf063e2118b97c5866b1d7757d0fe0fa3e74bf58ceec853a613f90866444
MD5 bd0c85dfbeea3717fcc91c07a72e2bbb
SHA1 e31912cc1f8d29f83a438ad8631c59fa7c3ff0b9
SHA512 f9ad5ab34d9a4deb00cd96f9a8525c2e947d5201b0c3b451d30953cef684380932ce8d0e42ec24e8097038d78a01a434107b1be1e41fa3a9a676657eedeb45bd
SSDEEP 3072:SqPgMLqM2mPjK2EYIWwI3uzieWFbgkWNZXqaBFVzK4DNpd+spq+H8:TgMLqY7th3aWFbg/tzVzKOdHUF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 281KB

server.exe

IMPHASH f7c5b620acbcc0f29abfcbc3407e0336
SHA256 dd0faf063e2118b97c5866b1d7757d0fe0fa3e74bf58ceec853a613f90866444
MD5 bd0c85dfbeea3717fcc91c07a72e2bbb
SHA1 e31912cc1f8d29f83a438ad8631c59fa7c3ff0b9
SHA512 f9ad5ab34d9a4deb00cd96f9a8525c2e947d5201b0c3b451d30953cef684380932ce8d0e42ec24e8097038d78a01a434107b1be1e41fa3a9a676657eedeb45bd
SSDEEP 3072:SqPgMLqM2mPjK2EYIWwI3uzieWFbgkWNZXqaBFVzK4DNpd+spq+H8:TgMLqY7th3aWFbg/tzVzKOdHUF
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20823

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CallNamedPipeA GlobalAddAtomA InterlockedIncrement VerSetConditionMask FindCloseChangeNotification FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA FormatMessageA GetWindowsDirectoryA GetDateFormatA FindResourceExA SetCommConfig GetFileAttributesA lstrcpynW GetBinaryTypeA IsDBCSLeadByte GetStringTypeExA LCMapStringA EnumSystemLocalesA GetConsoleAliasExesLengthA GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA WriteConsoleA LocalAlloc GetFileType OpenJobObjectW FoldStringW EnumDateFormatsA CancelTimerQueueTimer GetStringTypeW OpenEventW FindAtomW GlobalReAlloc SetLastError GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleHandleA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA HeapSize

user32

RegisterClassW ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA

Sharing