server[.]exe | Triage™

General

Target
server.exe
Size 32KB
Sample260913-ranaksgl2w
SHA256 5b7ab1dc1f734da9db9334deb5af55dc00512080fb641f43b6cbf4d1b71eae48
MD5 b5c1e6f3b65a26ad3b841078c456938d
SHA1 bbde99a69cd679c967a1c221934ce75c1ac39bcc
SHA512 de25310b74d022d6262293b7b71413d6ee7ec8c82c5793f55329cde134f3ea835526bfa5deee8572df78b7db2eb568ffd75a3af9a81afd79454d5581e7080ec0
SSDEEP 384:vtHw9lRPwz2jSUpInHDzcNIpBKywTDwMGWYccF3BoJzEY+tHVkw3ccNwifGIyLsH:v5w9lRPwzpjbvwTDwMh+Uw3ccrfLlqr
TLSH
T176E2094C73A48A23C67E57B84E70964207F1C14B5526EBAF8EC550DA1EA7BE41E00EF7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
server.exe

File Explorer

server.exe

.exe 32KB

server.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5b7ab1dc1f734da9db9334deb5af55dc00512080fb641f43b6cbf4d1b71eae48
MD5 b5c1e6f3b65a26ad3b841078c456938d
SHA1 bbde99a69cd679c967a1c221934ce75c1ac39bcc
SHA512 de25310b74d022d6262293b7b71413d6ee7ec8c82c5793f55329cde134f3ea835526bfa5deee8572df78b7db2eb568ffd75a3af9a81afd79454d5581e7080ec0
SSDEEP 384:vtHw9lRPwz2jSUpInHDzcNIpBKywTDwMGWYccF3BoJzEY+tHVkw3ccNwifGIyLsH:v5w9lRPwzpjbvwTDwMh+Uw3ccrfLlqr
TLSH
T176E2094C73A48A23C67E57B84E70964207F1C14B5526EBAF8EC550DA1EA7BE41E00EF7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

39198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

server.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

server.exe

mscoree

dotnet