server[.]exe | Triage™

General

Target
server.exe
Size 178KB
Sample230320-rdvh3afh2w
SHA256 f139bc8f71a483ba058e2577ef5952b85a74cebd302632a121e4bbc0d96bb953
MD5 386839452984e2eda4151746d57ea19b
SHA1 b9c43085f6b63db8a02b4764c4d75699efa9d074
SHA512 9a2dd73db8c62f891084d4c47d3edceb2f7eae0113374e9c89d3670dbcb21c98f032b603109a7cad859ad7f3f0c00367e295a8436e3d9749b9ddfe2395151b0d
SSDEEP 3072:tQPCdvNZmiJN2CE91O6lbP+pnW6ya2wPAnBb4:SavnKO6lz6Tyatw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 178KB

server.exe

IMPHASH b6299cf22bb1b2b906c76a98a991dd84
SHA256 f139bc8f71a483ba058e2577ef5952b85a74cebd302632a121e4bbc0d96bb953
MD5 386839452984e2eda4151746d57ea19b
SHA1 b9c43085f6b63db8a02b4764c4d75699efa9d074
SHA512 9a2dd73db8c62f891084d4c47d3edceb2f7eae0113374e9c89d3670dbcb21c98f032b603109a7cad859ad7f3f0c00367e295a8436e3d9749b9ddfe2395151b0d
SSDEEP 3072:tQPCdvNZmiJN2CE91O6lbP+pnW6ya2wPAnBb4:SavnKO6lz6Tyatw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12081

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PulseEvent SetDefaultCommConfigA FindFirstFileW EnumCalendarInfoA CopyFileExW GetConsoleAliasExesA _llseek BuildCommDCBAndTimeoutsA GetConsoleAliasA GetCurrentProcess InterlockedCompareExchange GetWindowsDirectoryA EnumTimeFormatsA WriteFileGather EnumResourceTypesA ActivateActCtx GetFirmwareEnvironmentVariableA LoadLibraryW Sleep ReadConsoleInputA GetFileAttributesW WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock RaiseException SetCurrentDirectoryA SetLastError GetProcAddress EnterCriticalSection GlobalGetAtomNameA GlobalFree OpenWaitableTimerA LocalAlloc FindFirstVolumeMountPointW AddAtomA FindNextFileA GetModuleHandleA GetCPInfoExA SetCalendarInfoA DeleteFileW EnumCalendarInfoExA GetLastError DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapFree SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc WriteConsoleW MultiByteToWideChar IsProcessorFeaturePresent LCMapStringW GetStringTypeW HeapSize CloseHandle CreateFileW

user32

LoadMenuA

Sharing