50fb1b8dc553caaf716e61a26bd6bbf63458db3029688a1d364c9d74189693ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50fb1b8dc553caaf716e61a26bd6bbf63458db3029688a1d364c9d74189693ed
Size

816KB
MD5

affc63a9230eb239a1e72fbd8220d5ed
SHA1

c7e2d01163725b500491d3a9298a666e25645535
SHA256

50fb1b8dc553caaf716e61a26bd6bbf63458db3029688a1d364c9d74189693ed
SHA512

fe716b2798b4a0b2d6ef6e90fcb42fa4b27c20261fac5a61739344f56c5ce41a279c0f695b9e746242486f19c0b2fd630e927d23d0926780c12a8b34213355be
SSDEEP

24576:TNN40LPw3hXNmo5nEE7gHgJR01BiOfQRpWP4Ndd:7JPCNmtKDJCHiOf2phd

Score

N/A

Malware Config

Signatures

Files

50fb1b8dc553caaf716e61a26bd6bbf63458db3029688a1d364c9d74189693ed
.exe windows x86

3da91ece7d43578e348086f72d02dea2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcmpA
Beep
FormatMessageA
TlsSetValue
Beep
Beep
ReleaseMutex
GetCurrentThreadId
Beep
GetFullPathNameW
SetCurrentDirectoryW
VirtualQuery
Beep
Beep
SetThreadPriority
TlsGetValue
lstrcatA
SetLocaleInfoW
GetCommandLineA
WriteConsoleW
Beep
GetPrivateProfileIntA
Beep
VirtualProtect
DeleteFileW
GetModuleFileNameW
Beep
Beep

catsrvut

StartMTSTOCOM
RegDBBackup
CGMIsAdministrator
RegDBRestore

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ