server[.]exe | Triage™

General

Target
server.exe
Size 360KB
Sample230322-nwqfaage82
SHA256 97fcb2199876005f3e4db6aa7280b15cd59dfe0b99c1fc0e722adb31f0d2e6b4
MD5 78b4ac76b3261a6ac4a94a868e39ac25
SHA1 0ea51d3d2032630bf53252657f0ff856ff0ee690
SHA512 b490d945fbc96d08c33bfb020bfcedf542e90ec9018fa588303e0743e92a1e5a0d1d095a2b2394cdd754709f71396a828339f8ab78d830a2865e920d3756180a
SSDEEP 3072:jyjrlS0bY/04BjuajiKAOSAjhKmj03oXGjyaFgE92ZP+4Ysd8BAmgwn0JV:nV0am9efOyad9L4Y3R
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 360KB

server.exe

IMPHASH c3df3d0d993bdeac73a0f5fd62093e4d
SHA256 97fcb2199876005f3e4db6aa7280b15cd59dfe0b99c1fc0e722adb31f0d2e6b4
MD5 78b4ac76b3261a6ac4a94a868e39ac25
SHA1 0ea51d3d2032630bf53252657f0ff856ff0ee690
SHA512 b490d945fbc96d08c33bfb020bfcedf542e90ec9018fa588303e0743e92a1e5a0d1d095a2b2394cdd754709f71396a828339f8ab78d830a2865e920d3756180a
SSDEEP 3072:jyjrlS0bY/04BjuajiKAOSAjhKmj03oXGjyaFgE92ZP+4Ysd8BAmgwn0JV:nV0am9efOyad9L4Y3R
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16573

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindFirstFileW EnumCalendarInfoA _llseek VerSetConditionMask GetCurrentProcess WritePrivateProfileSectionA SetDefaultCommConfigW InterlockedCompareExchange WriteConsoleInputA BackupSeek FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetWindowsDirectoryA EnumTimeFormatsA EnumResourceTypesA ActivateActCtx GlobalAlloc LoadLibraryW TerminateThread GetFileAttributesA GetConsoleAliasW IsDBCSLeadByte lstrcmpW GlobalUnlock SetLastError GetProcAddress GetFirmwareEnvironmentVariableW EnterCriticalSection GlobalFree ResetEvent OpenWaitableTimerA LocalAlloc SetCalendarInfoW BuildCommDCBAndTimeoutsW AddAtomW SetCurrentDirectoryW GlobalGetAtomNameW WaitForMultipleObjects FindNextFileA FindFirstVolumeMountPointA GetCPInfoExA ReadConsoleInputW DeleteFileW CopyFileExA DeleteFileA CloseHandle HeapSize GetLastError WideCharToMultiByte GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection ExitProcess WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapAlloc HeapReAlloc WriteConsoleW CreateFileW

user32

LoadMenuA

Sharing