58b12d6f75f21ca2af5920252fd973a7bfd1d3e9b991dbc22caf3acfb31294e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58b12d6f75f21ca2af5920252fd973a7bfd1d3e9b991dbc22caf3acfb31294e8
Size

816KB
MD5

a8fede74d71b84a142f2b27c5f1f4ce7
SHA1

ee40a0d5cc1fd3dcb1727fec15195b154f7840dd
SHA256

58b12d6f75f21ca2af5920252fd973a7bfd1d3e9b991dbc22caf3acfb31294e8
SHA512

557259644349fdb3004760157cb691cd38e526d28e14b90184e14139746afbca82d535d72fb86b89a7af00dc182c13736c81be1971a1c9211b8575ef3efd3026
SSDEEP

12288:1pJ1RNzgSyDx2JWYnnkOkXdgoG3vM44yLjHJvCSAeTF8JkWG0sJBIqDSox:73Ty12JWSnWdgIyLjHJ2E+/G0Ssox

Score

N/A

Malware Config

Signatures

Files

58b12d6f75f21ca2af5920252fd973a7bfd1d3e9b991dbc22caf3acfb31294e8
.exe windows x86

cb27207f5067362229625527fe479e8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetCurrentThreadId
VirtualProtect
ReleaseMutex
OpenMutexA
FormatMessageA
Beep
TlsSetValue
VirtualQuery
Beep
GetPrivateProfileIntA
Beep
SetThreadPriority
SetCurrentDirectoryW
Beep
GetModuleHandleA
Beep
WriteConsoleW
lstrcatA
SetLocaleInfoW
DeleteFileW
GetFullPathNameW
Beep
Beep
TlsGetValue
Beep
Beep
Beep
GetCommandLineA

catsrvut

CGMIsAdministrator
RegDBRestore
RegDBBackup
StartMTSTOCOM

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE