53db3accc1bdb20a61fba7b0a142ba5a6c00bb64f86df550744913a589e3afaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53db3accc1bdb20a61fba7b0a142ba5a6c00bb64f86df550744913a589e3afaf
Size

816KB
MD5

e9cb798e88b5dcb4a957045bf94a552c
SHA1

68b49dc1a70340631f22e968a447c32595f4f553
SHA256

53db3accc1bdb20a61fba7b0a142ba5a6c00bb64f86df550744913a589e3afaf
SHA512

400c8ab2999292190016cb16cfd6ff5d90ca7b04e57d0d73839228a59e7f8d29bbad00e49d6b6df08abaf96341674eacb0643ddb92d4a3b6cd83331077448172
SSDEEP

24576:8i7Rj/5mdd8XhVnh0GOFCan4L4QsQVuGOrV:8idMzAhVnmCan05sQYGoV

Score

N/A

Malware Config

Signatures

Files

53db3accc1bdb20a61fba7b0a142ba5a6c00bb64f86df550744913a589e3afaf
.exe windows x86

1ac305c049a79d0af6f4274af6705842

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocaleInfoA
SetThreadPriority
GetModuleHandleA
DeleteFileW
Beep
lstrlenW
lstrcatA
ReleaseMutex
Beep
WriteConsoleW
Beep
Beep
TlsGetValue
GetCurrentThreadId
SetCurrentDirectoryW
GetModuleFileNameW
GetCommandLineA
Beep
VirtualQuery
VirtualProtect
Beep
GetPrivateProfileIntA
Beep
TlsSetValue
Beep
Beep
FormatMessageA
Beep
GetFullPathNameW

catsrvut

RegDBRestore
RegDBBackup
StartMTSTOCOM
CGMIsAdministrator

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ