b79ef3cda3177632809696e029c3b1ea00ff986bbaa03acbb2f0ff6e3228bf34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b79ef3cda3177632809696e029c3b1ea00ff986bbaa03acbb2f0ff6e3228bf34
Size

816KB
MD5

5d0b4e78eb6456e0e0671008777e7476
SHA1

de6358bab7c85a22433c7a07f9a938ef9bbec527
SHA256

b79ef3cda3177632809696e029c3b1ea00ff986bbaa03acbb2f0ff6e3228bf34
SHA512

e9ba3c0d3715d58ca0517fe5db2e39626f90c99dcc061a14931275f5a644e2bd73ba92c72c3cb20027ddd9ea5ce4de280b00f549a3810e6d6d4e98c07cad6230
SSDEEP

12288:upFpXHj8ycVJM9KZFz8Poj8FNPbQyEmcYdFC65Crr/aC4SAIiAKGemxWLNI:upFpTZcVJyC4AIbQhjYLCxr9Tcnh

Score

N/A

Malware Config

Signatures

Files

b79ef3cda3177632809696e029c3b1ea00ff986bbaa03acbb2f0ff6e3228bf34
.exe windows x86

c45e3a8553a3501bb19564f1f7dd727e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
Beep
Beep
Beep
Beep
lstrcmpA
Beep
VirtualProtect
Beep
GetCurrentThreadId
VirtualQuery
Beep
TlsSetValue
GetCommandLineA
GetModuleFileNameW
Beep
WriteConsoleW
FormatMessageA
ReleaseMutex
GetModuleHandleA
GetPrivateProfileIntA
Beep
SetLocaleInfoW
lstrcatA
GetFullPathNameW
TlsGetValue
SetThreadPriority
DeleteFileW
SetCurrentDirectoryW

catsrvut

RegDBBackup
StartMTSTOCOM
CGMIsAdministrator
RegDBRestore

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ