35eb017936b573b44c5edcee45ac1674d179f20436d5ff8c58c2421fa053a2b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35eb017936b573b44c5edcee45ac1674d179f20436d5ff8c58c2421fa053a2b6
Size

816KB
MD5

5e2031250080b2b1075b2dd295b1c920
SHA1

28feaa76c060099cffe204ddc9b0de5436407632
SHA256

35eb017936b573b44c5edcee45ac1674d179f20436d5ff8c58c2421fa053a2b6
SHA512

bd86bcba2fbdbe6faa83f3f8dc70662cfdd051052a774c541f1e7523ffbae874b75a58b540082e10373cd789dd87e5113264f3215e16d8f80e9069e4336eb8da
SSDEEP

24576:Nakp7zm/u3o93ntJAfTSQK+jhjA5JQ0w63wvr:Nakp3eWOdJdd+N7qwvr

Score

N/A

Malware Config

Signatures

Files

35eb017936b573b44c5edcee45ac1674d179f20436d5ff8c58c2421fa053a2b6
.exe windows x86

6e509b1f7d1bf0b00f5402062565fc63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
Beep
FormatMessageA
GetModuleHandleA
SetThreadPriority
Beep
Beep
Beep
TlsGetValue
GetFullPathNameW
VirtualQuery
SetLocaleInfoA
Beep
GetModuleFileNameW
TlsSetValue
DeleteFileW
ReleaseMutex
Beep
GetPrivateProfileIntA
Beep
Beep
GetCommandLineA
lstrlenW
VirtualProtect
GetCurrentThreadId
Beep
lstrcatA
SetCurrentDirectoryW
Beep

catsrvut

StartMTSTOCOM
RegDBRestore
CGMIsAdministrator
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ