5a3d6a937ac536325a66f529087f288801e30265700d8a58315a9c6891b2abb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a3d6a937ac536325a66f529087f288801e30265700d8a58315a9c6891b2abb8
Size

816KB
MD5

5dc67ea63ec9221f673cee2240f5b61c
SHA1

8d000ac78674aa088338561e34be8a5ea420ff4f
SHA256

5a3d6a937ac536325a66f529087f288801e30265700d8a58315a9c6891b2abb8
SHA512

ceb2508fed0e77376c3c4531005cc610f34ce6e4c885175d16165b795bfb750ca683ed7c4086f0964144ade558be8dc91e2933c85b912f58a8723a6b96a5fd59
SSDEEP

12288:wtGBeSKySXiK9DSpK7yRlibc4aMmTLDZQTnvd3tkYO19TzRxUNAFF05tE7dWl86a:nEXb9v7YcTjn13KYO1jx6AFFKtEE2/

Score

N/A

Malware Config

Signatures

Files

5a3d6a937ac536325a66f529087f288801e30265700d8a58315a9c6891b2abb8
.exe windows x86

8f5f6ffbd4814791b9e8db40e54752ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
GetCurrentThreadId
TlsSetValue
WriteConsoleW
Beep
Beep
GetPrivateProfileIntA
ReleaseMutex
Beep
DeleteFileW
VirtualProtect
SetThreadPriority
SetLocaleInfoA
GetModuleFileNameW
lstrcatA
Beep
FormatMessageA
Beep
GetFullPathNameW
lstrlenW
GetModuleHandleA
Beep
VirtualQuery
GetCommandLineA
SetCurrentDirectoryW
Beep
Beep
Beep
TlsGetValue

catsrvut

RegDBBackup
RegDBRestore
StartMTSTOCOM
CGMIsAdministrator

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ