4a21db991c20d634e2a3d5e206c0ec6a2b5d462de4dd65c5be3aff6323c1660a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a21db991c20d634e2a3d5e206c0ec6a2b5d462de4dd65c5be3aff6323c1660a
Size

817KB
MD5

c6726eadfe1c4075153874e9a2d8f5b0
SHA1

18737cb79b7dc8fb897e7a2583557939a2cc1373
SHA256

4a21db991c20d634e2a3d5e206c0ec6a2b5d462de4dd65c5be3aff6323c1660a
SHA512

1190fb09841f1f1cc6ac2c10543eef383856689d8fbab89df1e0e3a071a1c8df327f0092a4c7a78926e2a352252a762a196debe2e44d3627323afb110b759ad1
SSDEEP

24576:cwh+XT6GHQiAONf8Ws+IjLn0XRHPlyNy:STKOzs1PnQRv

Score

N/A

Malware Config

Signatures

Files

4a21db991c20d634e2a3d5e206c0ec6a2b5d462de4dd65c5be3aff6323c1660a
.exe windows x86

2a99bcbe61831458d0537a0902bc7bae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
Beep
OpenMutexA
GetFileSize
FormatMessageA
GetCurrentThreadId
Beep
SetCurrentDirectoryW
Beep
SetThreadPriority
Beep
Beep
Beep
lstrcmpA
GetFullPathNameW
Beep
GetCommandLineA
Beep
lstrcatA
DeleteFileW
VirtualQuery
TlsSetValue
SetLocaleInfoW
GetModuleHandleA
WriteConsoleW
VirtualProtect
TlsGetValue
Beep
Beep

catsrvut

RegDBBackup
RegDBRestore
StartMTSTOCOM
CGMIsAdministrator

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE