cbf118957629e157ff85520bfe5414bf34d07320a76c6e12843463984cf74498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbf118957629e157ff85520bfe5414bf34d07320a76c6e12843463984cf74498
Size

816KB
MD5

a4cadf3c244c8f86f800c1152f494c27
SHA1

617455bcb13c32f9693275048cb21485a052ec43
SHA256

cbf118957629e157ff85520bfe5414bf34d07320a76c6e12843463984cf74498
SHA512

0934489a0448c8a1d8d68f1c1683be535ee5c86a7ca426e8fc9b516dd8e23824f1cd20a4a0767012dcf275de479ff950cffc569e3056471bd62bebf83a08150f
SSDEEP

12288:x/jZxjPO/UIxla4YdRp4OKbS2hMyvsYZFz/V7SRDLrYbaiXmCFiA2mDjjzP9+ijd:xNxjPClxlytKbxh8YzVkqai/DjHP9Z

Score

N/A

Malware Config

Signatures

Files

cbf118957629e157ff85520bfe5414bf34d07320a76c6e12843463984cf74498
.exe windows x86

4466fd19593b61aef3129707cdb384cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
GetCommandLineA
VirtualQuery
Beep
DeleteFileW
Beep
VirtualProtect
Beep
SetThreadPriority
Beep
GetFullPathNameW
FormatMessageA
GetModuleFileNameW
Beep
Beep
Beep
SetLocaleInfoA
Beep
TlsGetValue
GetCurrentThreadId
GetModuleHandleA
Beep
GetPrivateProfileIntA
Beep
lstrlenW
lstrcatA
ReleaseMutex
SetCurrentDirectoryW
WriteConsoleW

catsrvut

RegDBRestore
CGMIsAdministrator
StartMTSTOCOM
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ