de3bff2bec4659b1211b8252713f7eb3915790a6fa845c0b3d6e8146ce531c00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de3bff2bec4659b1211b8252713f7eb3915790a6fa845c0b3d6e8146ce531c00
Size

816KB
MD5

5ee0aa237fc39093feadedaedc1de771
SHA1

483e4b8e34e1c8fd116ff95eb2249103a6a770d9
SHA256

de3bff2bec4659b1211b8252713f7eb3915790a6fa845c0b3d6e8146ce531c00
SHA512

ac4e754594d141eb51e25b3ffa97f2001a22fb9c27072019695545bdc9abf6f7c4883d320047d5190da835afbbf097d167e765c96693511b73ed5b79b49fc538
SSDEEP

24576:ww3Z2R+WRwx0Lfucd7NkziQfuIVwzbejMF:4VR7fLdxIVoej

Score

N/A

Malware Config

Signatures

Files

de3bff2bec4659b1211b8252713f7eb3915790a6fa845c0b3d6e8146ce531c00
.exe windows x86

3b67c44f09212aa26172d57915f0a0b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
VirtualProtect
GetPrivateProfileIntA
Beep
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
SetThreadPriority
TlsGetValue
ReleaseMutex
WriteConsoleW
Beep
Beep
Beep
SetCurrentDirectoryW
FormatMessageA
Beep
GetFullPathNameW
lstrcatA
Beep
GetCommandLineA
TlsSetValue
Beep
SetLocaleInfoA
Beep
GetCurrentThreadId
Beep
Beep
DeleteFileW

catsrvut

RegDBRestore
RegDBBackup
CGMIsAdministrator
StartMTSTOCOM

Sections

.text
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ