d6723d088cbd60f90cf464185b5a87a84ac5f89570a4852e960c2e17daae03de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6723d088cbd60f90cf464185b5a87a84ac5f89570a4852e960c2e17daae03de
Size

816KB
MD5

c0ed165fee0386865b65c3aa5ff4904d
SHA1

2dece88847ea0a231ea33a3006326ec0bef96755
SHA256

d6723d088cbd60f90cf464185b5a87a84ac5f89570a4852e960c2e17daae03de
SHA512

9012f367bc81145ad601c4df9f85d82e2b8b69cd22bef9be426bc667433abd4e6fec185962e360139ecb553fcadc0b64d2db153f724075fc70b0965e553d3a49
SSDEEP

24576:tT10wzk1K7FZAI9BBQ2fvym/3TGeBxaQlYun1M619U7fDjp:tGt1MDAI93Q8vxLlYo1MOC77l

Score

N/A

Malware Config

Signatures

Files

d6723d088cbd60f90cf464185b5a87a84ac5f89570a4852e960c2e17daae03de
.exe windows x86

b496f0000e0f49456ccc16b5b54a65aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
VirtualProtect
Beep
WriteConsoleW
DeleteFileW
lstrcmpA
lstrcatA
Beep
GetCurrentThreadId
VirtualQuery
GetFullPathNameW
Beep
FormatMessageA
GetModuleFileNameW
GetPrivateProfileIntA
TlsGetValue
GetModuleHandleA
Beep
SetLocaleInfoW
SetCurrentDirectoryW
Beep
SetThreadPriority
Beep
Beep
GetCommandLineA
ReleaseMutex
TlsSetValue
Beep
Beep

catsrvut

CGMIsAdministrator
RegDBBackup
StartMTSTOCOM
RegDBRestore

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ