server[.]exe | Triage™

General

Target
server.exe
Size 177KB
Sample230320-j5ye2aee8w
SHA256 6bff2ef434e07b1919cd17a3f47d1494764f3b5ac2449326ab8f0c53e1a7d3ee
MD5 88176d4cc232bd1aea81caaa0071174e
SHA1 2d0a1593692ec9eeb8f33f48826539fbe8492d6d
SHA512 65eaf077a641a189e07e9a890831aedc945876acaf995158218685a62fc2b147b57026f0e1e7e6fb08f1367af79f249edcabb8ffc15212d79951e6eac937968e
SSDEEP 3072:85/nqdR3WDzhpezjJ8gWBziVjeBfTWSrc+:gqbaeBMOKMSrc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 177KB

server.exe

IMPHASH 0c16d61a145a6038e0c4acd3e1db8764
SHA256 6bff2ef434e07b1919cd17a3f47d1494764f3b5ac2449326ab8f0c53e1a7d3ee
MD5 88176d4cc232bd1aea81caaa0071174e
SHA1 2d0a1593692ec9eeb8f33f48826539fbe8492d6d
SHA512 65eaf077a641a189e07e9a890831aedc945876acaf995158218685a62fc2b147b57026f0e1e7e6fb08f1367af79f249edcabb8ffc15212d79951e6eac937968e
SSDEEP 3072:85/nqdR3WDzhpezjJ8gWBziVjeBfTWSrc+:gqbaeBMOKMSrc
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12049

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA _llseek GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange SleepEx GetWindowsDirectoryA EnumTimeFormatsW WriteFileGather EnumResourceTypesA ActivateActCtx GlobalAlloc GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA AddAtomA FindFirstVolumeMountPointA GetModuleHandleA FindNextFileW GetShortPathNameW GetCPInfoExA SetCalendarInfoA ReadConsoleInputW DeleteFileW EnumCalendarInfoExA LocalFree CopyFileExA GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing