98aa23266cb04647ecb752d9d803cf98eabdda24ed2118fada055c7d2f324ff3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98aa23266cb04647ecb752d9d803cf98eabdda24ed2118fada055c7d2f324ff3
Size

817KB
MD5

82b358464774b792069bcb28372adab3
SHA1

be3053563a1e0d4c7a66946795d2f0340e75d172
SHA256

98aa23266cb04647ecb752d9d803cf98eabdda24ed2118fada055c7d2f324ff3
SHA512

dc373b51f120b0816589f53f7d4fb31618f838be90d4f3f250a32a59fd35bf900def02be252d0d5f154b9ba7eff6de8eb02143b1243eb80a55aca1828f2c7900
SSDEEP

24576:G3bT65KuBzZvijbicmVLPngZtssjma5YPIuVYf4WD:0S53BzZvijbic4rgZlCfdw

Score

N/A

Malware Config

Signatures

Files

98aa23266cb04647ecb752d9d803cf98eabdda24ed2118fada055c7d2f324ff3
.exe windows x86

4a08154a0f58b04382ae438275a6f1ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
VirtualProtect
Beep
Beep
OpenMutexA
Beep
GetFullPathNameW
Beep
GetCommandLineA
lstrcatA
GetPrivateProfileIntA
GetModuleHandleA
GetFileSize
Beep
GetCurrentThreadId
Beep
SetCurrentDirectoryW
TlsSetValue
Beep
WriteConsoleW
lstrcmpA
Beep
SetLocaleInfoW
Beep
DeleteFileW
Beep
TlsGetValue
FormatMessageA
SetThreadPriority

catsrvut

CGMIsAdministrator
RegDBRestore
StartMTSTOCOM
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE