server[.]exe | Triage™

General

Target
server.exe
Size 281KB
Sample230309-rt5c7scg73
SHA256 ec87f0a2d3bfa3e685e961aaed68df89f825ac08759363c27a3a55fd03d93f6f
MD5 69d5657bf86b501e70f5ef7621ead86a
SHA1 9b92d48acc6993b359fc1c8c3e9375fd9fe5a112
SHA512 775a29ebd6a234377329d8d294b80fe5c13b8b8fc6700eaf311e545204ff271c2f22a976fb69a1403b8dd4f391340f285d808f6b84d8ee287a9c3cbc44fe5f2f
SSDEEP 3072:eO7OotzlLgpFTlp8N+IGkwG9u0aa17HQHpkCy9RKgWamjokspq+Hz:/xJLgPc2Auje7gaCy9RKgdmjopUO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 281KB

server.exe

IMPHASH 2419dca19886d17884c312786a5b3a55
SHA256 ec87f0a2d3bfa3e685e961aaed68df89f825ac08759363c27a3a55fd03d93f6f
MD5 69d5657bf86b501e70f5ef7621ead86a
SHA1 9b92d48acc6993b359fc1c8c3e9375fd9fe5a112
SHA512 775a29ebd6a234377329d8d294b80fe5c13b8b8fc6700eaf311e545204ff271c2f22a976fb69a1403b8dd4f391340f285d808f6b84d8ee287a9c3cbc44fe5f2f
SSDEEP 3072:eO7OotzlLgpFTlp8N+IGkwG9u0aa17HQHpkCy9RKgWamjokspq+Hz:/xJLgPc2Auje7gaCy9RKgdmjopUO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20470

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA CallNamedPipeA GlobalAddAtomA InterlockedIncrement VerSetConditionMask FindCloseChangeNotification FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesA FormatMessageA GetWindowsDirectoryA GetDateFormatA GlobalAlloc SetCommConfig GetFileAttributesA lstrcpynW IsDBCSLeadByte GetBinaryTypeW GetStringTypeExA LCMapStringA FindResourceExW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA LoadLibraryA WriteConsoleA GetFileType OpenJobObjectW FoldStringA EnumDateFormatsA CancelTimerQueueTimer GetStringTypeW OpenEventW FindAtomW GlobalReAlloc EnumSystemLocalesA GetStartupInfoW HeapAlloc GetLastError HeapFree SetUnhandledExceptionFilter Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount GetModuleHandleA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA HeapSize

user32

RegisterClassW ValidateRect GetMenuInfo

gdi32

GetGlyphIndicesA

Sharing