server[.]exe | Triage™

General

Target
server.exe
Size 177KB
Sample230320-nvkhmsfc8y
SHA256 0fa7c98d793b8c71d6ba29bde4fd449e497b246f92ab30403330fae3d8cb6ffd
MD5 7e7372ed34c76cbeca4461bd6dbbfe62
SHA1 5825f7a6272108b061a557171da9b8ef6b780028
SHA512 2548449b2e5e623600ab080a8213df3164bee0fa9e4690a31c8aac45f856fb7a786dbfc5150202757fe3512ad0d25afc8f635ba67ab08f778c51a9ebb461e284
SSDEEP 3072:iN5tPqqyTcVsXaHJNM1NjtJMD1U85En8d/LZM:MlqJPaHihCm85En81Z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 177KB

server.exe

IMPHASH 2bf4bd16bd9a3948cc472dde1e8c8ccd
SHA256 0fa7c98d793b8c71d6ba29bde4fd449e497b246f92ab30403330fae3d8cb6ffd
MD5 7e7372ed34c76cbeca4461bd6dbbfe62
SHA1 5825f7a6272108b061a557171da9b8ef6b780028
SHA512 2548449b2e5e623600ab080a8213df3164bee0fa9e4690a31c8aac45f856fb7a786dbfc5150202757fe3512ad0d25afc8f635ba67ab08f778c51a9ebb461e284
SSDEEP 3072:iN5tPqqyTcVsXaHJNM1NjtJMD1U85En8d/LZM:MlqJPaHihCm85En81Z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12081

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA CopyFileExW GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA LocalAlloc FindFirstVolumeMountPointW AddAtomA FindNextFileA GetModuleHandleA GetCPInfoExA SetCalendarInfoA DeleteFileW EnumCalendarInfoExA LocalFree GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing