server[.]exe | Triage™

General

Target
server.exe
Size 177KB
Sample230320-pxw5wsfe8t
SHA256 a9934cc506821e82237fdaf471f845e1e027b37841d635f971b8df6853e9d7f9
MD5 2ca14653601a8e9adb830e183c5874d7
SHA1 0e75f94eb23c8aac9b3301951d2df8639304a165
SHA512 6bc10edfc7f586cca680eebff64ce6e4a126961422027c1c8b115d879a893ab16727872aba8c5574ebd11a5a31bad757e72d5d4a42c842cf527879d87b42a0a3
SSDEEP 3072:QSR/F1oN0510sk/iH6xxkhdbV5Vk6T23Ls/CYi:9vom0KH6sN/VkJLs/C
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 177KB

server.exe

IMPHASH 2bf4bd16bd9a3948cc472dde1e8c8ccd
SHA256 a9934cc506821e82237fdaf471f845e1e027b37841d635f971b8df6853e9d7f9
MD5 2ca14653601a8e9adb830e183c5874d7
SHA1 0e75f94eb23c8aac9b3301951d2df8639304a165
SHA512 6bc10edfc7f586cca680eebff64ce6e4a126961422027c1c8b115d879a893ab16727872aba8c5574ebd11a5a31bad757e72d5d4a42c842cf527879d87b42a0a3
SSDEEP 3072:QSR/F1oN0510sk/iH6xxkhdbV5Vk6T23Ls/CYi:9vom0KH6sN/VkJLs/C
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12081

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA CopyFileExW GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA LeaveCriticalSection GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress GlobalGetAtomNameA OpenWaitableTimerA LocalAlloc FindFirstVolumeMountPointW AddAtomA FindNextFileA GetModuleHandleA GetCPInfoExA SetCalendarInfoA DeleteFileW EnumCalendarInfoExA LocalFree GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW EnterCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing