e8ef8f080bacc3c0b6d35106a841295a8a633dc0a15f796c04cd14876b5aa2aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ef8f080bacc3c0b6d35106a841295a8a633dc0a15f796c04cd14876b5aa2aa
Size

816KB
MD5

7db7886ed1ef669b7630eb8b6f266700
SHA1

fe729896ecd46ae81744ad84fb6f1022a3a65b5f
SHA256

e8ef8f080bacc3c0b6d35106a841295a8a633dc0a15f796c04cd14876b5aa2aa
SHA512

00eb7a27d87483faab23ff9fa47c6a8eda36f0a89d915f2cd23eaabb14d0e4876151baa5465693e18158257bafb400efc100b4d278490cd20b544fb581c8ca57
SSDEEP

24576:3a9Wp63fURarkTqkkq6U3+WORi3639SQ3z15pnEf7:WWccwITBkXk+WOM389SID6

Score

N/A

Malware Config

Signatures

Files

e8ef8f080bacc3c0b6d35106a841295a8a633dc0a15f796c04cd14876b5aa2aa
.exe windows x86

a31a4cd049580938e8f0dbb8af0d17c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetCurrentThreadId
GetFullPathNameW
Beep
Beep
FormatMessageA
Beep
GetModuleHandleA
Beep
Beep
Beep
ReleaseMutex
SetLocaleInfoW
VirtualProtect
DeleteFileW
Beep
TlsGetValue
GetModuleFileNameW
Beep
SetCurrentDirectoryW
Beep
WriteConsoleW
GetPrivateProfileIntA
Beep
TlsSetValue
lstrcatA
SetThreadPriority
VirtualQuery
GetCommandLineA

catsrvut

RegDBBackup
StartMTSTOCOM
CGMIsAdministrator
RegDBRestore

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ