server[.]exe | Triage™

General

Target
server.exe
Size 247KB
Sample230324-ltbs1aff4y
SHA256 ecfe68b783dbdaddac6583ad328fcffc376ce6d8dfa7a40ed7ff27a5ef65cd4d
MD5 1bea9be945857a23b4103c397c98525f
SHA1 eaaae21cad6b0470a56c9c1d631c68557dc5a430
SHA512 d87dc4e8cce7152d421ee9b8dfc7b2652f2672393c07212908859c8b3595d077a891e2ff74397e4aa8b3dfa23e1718048322aeb812aae26d289161d0de029458
SSDEEP 6144:Bhg0NRMT+pBn3paIikHh6TLPbY1k5dm5uj:vg0NRXpXGkHUT4O5Qw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

server.exe

.exe 247KB

server.exe

IMPHASH 7b85b4007e97101d5d345ff9023ba03d
SHA256 ecfe68b783dbdaddac6583ad328fcffc376ce6d8dfa7a40ed7ff27a5ef65cd4d
MD5 1bea9be945857a23b4103c397c98525f
SHA1 eaaae21cad6b0470a56c9c1d631c68557dc5a430
SHA512 d87dc4e8cce7152d421ee9b8dfc7b2652f2672393c07212908859c8b3595d077a891e2ff74397e4aa8b3dfa23e1718048322aeb812aae26d289161d0de029458
SSDEEP 6144:Bhg0NRMT+pBn3paIikHh6TLPbY1k5dm5uj:vg0NRXpXGkHUT4O5Qw
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

16693

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA CreateMutexW EnumCalendarInfoA GetStringTypeA GlobalCompact _llseek BuildCommDCBAndTimeoutsA VerSetConditionMask GetConsoleAliasA WriteConsoleInputA GetModuleHandleW EnumTimeFormatsW InitializeCriticalSection LoadLibraryW GetFileAttributesA TransactNamedPipe WritePrivateProfileSectionW TerminateProcess IsDBCSLeadByte lstrcmpW GlobalUnlock DeactivateActCtx SetCurrentDirectoryA SetLastError GetProcAddress PeekConsoleInputW GetFirmwareEnvironmentVariableW SearchPathA ResetEvent OpenWaitableTimerA GetProcessId LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW GlobalGetAtomNameW AddAtomA WaitForMultipleObjects EnumResourceTypesW GetPrivateProfileSectionNamesA FindNextFileA FreeEnvironmentStringsW GetCPInfoExA GetWindowsDirectoryW DeleteFileW EnumCalendarInfoExA CopyFileExA SetStdHandle WriteConsoleW GetLastError MoveFileA WideCharToMultiByte HeapAlloc DeleteFileA GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetCurrentThreadId GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentProcess ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW MultiByteToWideChar GetStringTypeW FatalAppExitA HeapFree Sleep IsProcessorFeaturePresent GetLocaleInfoW SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale RtlUnwind HeapReAlloc HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

LoadMenuW

Sharing