99b698f8bf5df5cc129c0b92a2fffed10aaf37f8a66663498f9eccf1e3220980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99b698f8bf5df5cc129c0b92a2fffed10aaf37f8a66663498f9eccf1e3220980
Size

816KB
MD5

e3a23d40cb4d0fdabe136727eea73814
SHA1

bead7256b4df827d0ee3ee8d517a057cdce20a38
SHA256

99b698f8bf5df5cc129c0b92a2fffed10aaf37f8a66663498f9eccf1e3220980
SHA512

17db46e186ffb2a8ad59dc743e7bfb484e6995df4cd97591688f4d38789a1caec49d857c7036f3cab42c3050ec5225d40ce6ce678b08d56a0b03573a1a418662
SSDEEP

12288:pl/Gdl3QUCqThdGUStJD5KgA/mZNjS1FFMVQvW5ZTgKp5mr9bh2XxI4CcVHo:pNIFQonSn5KTmvobW5xgcwr9h2X9Hp

Score

N/A

Malware Config

Signatures

Files

99b698f8bf5df5cc129c0b92a2fffed10aaf37f8a66663498f9eccf1e3220980
.exe windows x86

6422f311913389c547adbbc249182a82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
TlsSetValue
GetFullPathNameW
GetModuleFileNameW
Beep
Beep
SetCurrentDirectoryW
Beep
WriteConsoleW
Beep
GetCurrentThreadId
GetModuleHandleA
Beep
FormatMessageA
GetCommandLineA
SetThreadPriority
VirtualProtect
Beep
SetLocaleInfoA
Beep
ReleaseMutex
Beep
DeleteFileW
TlsGetValue
VirtualQuery
lstrlenW
Beep
GetPrivateProfileIntA
lstrcatA

catsrvut

StartMTSTOCOM
RegDBBackup
CGMIsAdministrator
RegDBRestore

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ