d7764d71ce3430318d1bb9014bc8830aebc731e382129a192dd8c1b779a11e72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7764d71ce3430318d1bb9014bc8830aebc731e382129a192dd8c1b779a11e72
Size

816KB
MD5

38dda0dd08cec24e0eb13d4e7be6d9a5
SHA1

0031a584638efc99428c00167de7237e9047d4a4
SHA256

d7764d71ce3430318d1bb9014bc8830aebc731e382129a192dd8c1b779a11e72
SHA512

d6b8c9c62b5a397dc4956b2b6c53352f02666efa982eb1878c141c42828c3a24a10ee636d96d26d2e1ef0a66b29623129d14530b2ef9f30b521109675ede6eeb
SSDEEP

24576:qcJ0GzqHbKa3nXckaHpCFBrorOIDBPD49Qp:rJLzqHbDXXraJyrtIt7J

Score

N/A

Malware Config

Signatures

Files

d7764d71ce3430318d1bb9014bc8830aebc731e382129a192dd8c1b779a11e72
.exe windows x86

d5af1469e1ca4bf5292d9dbe4dc01f19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
ReleaseMutex
TlsGetValue
SetLocaleInfoA
Beep
GetCurrentThreadId
GetFullPathNameW
lstrlenW
DeleteFileW
Beep
SetCurrentDirectoryW
GetCommandLineA
GetModuleFileNameW
Beep
Beep
Beep
Beep
Beep
TlsSetValue
FormatMessageA
lstrcatA
GetPrivateProfileIntA
Beep
VirtualProtect
Beep
Beep
WriteConsoleW
GetModuleHandleA
SetThreadPriority

catsrvut

CGMIsAdministrator
RegDBRestore
StartMTSTOCOM
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ