605145c65ca67fe57a3ba80462057ada020bb92ee62a4ec2b1c08a1bf738f233 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

605145c65ca67fe57a3ba80462057ada020bb92ee62a4ec2b1c08a1bf738f233
Size

816KB
MD5

641481f9a199526f497cf31283508b5e
SHA1

fdef15cf77c071a2fc3fe6015280c4f9a8cf791d
SHA256

605145c65ca67fe57a3ba80462057ada020bb92ee62a4ec2b1c08a1bf738f233
SHA512

b1c7e607ba5d3fcb9e37a1153f6846bdceee3ab213c08baff2e5f646202081c00e95bee4fe6924c08d8ac8e626f1b08cce1387fcfada92eed6edae6223efc23f
SSDEEP

24576:yfvUKjjFEmgXQ+iz4ZcclpVRh7jpdsuAip:yU0ex5iz4KclrRh7Ek

Score

N/A

Malware Config

Signatures

Files

605145c65ca67fe57a3ba80462057ada020bb92ee62a4ec2b1c08a1bf738f233
.exe windows x86

012d59399d7456934e0459d248ab2aff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetFullPathNameW
Beep
VirtualQuery
Beep
SetThreadPriority
Beep
SetLocaleInfoW
DeleteFileW
FormatMessageA
Beep
Beep
Beep
GetModuleFileNameW
SetCurrentDirectoryW
GetPrivateProfileIntA
GetCommandLineA
TlsGetValue
Beep
VirtualProtect
Beep
WriteConsoleW
TlsSetValue
GetCurrentThreadId
lstrcmpA
ReleaseMutex
Beep
Beep
GetModuleHandleA

catsrvut

RegDBBackup
RegDBRestore
CGMIsAdministrator
StartMTSTOCOM

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ