9447588536f2eef999d3186db6cbc8a1a57725769ffeca993155110384c78e07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9447588536f2eef999d3186db6cbc8a1a57725769ffeca993155110384c78e07
Size

817KB
MD5

70dff9e4639d7a5a4971855a878947a8
SHA1

a4a1661cd5656eb01bbbbf1d67aa1e4ab30c66c7
SHA256

9447588536f2eef999d3186db6cbc8a1a57725769ffeca993155110384c78e07
SHA512

29caa69d39b8b4162dada31b7b7550d9f6db16c50e11f5b8ef9333c4abeab2d2cd0194276f0f5c1446faf3f344236c981166206fbd616b902138aca30a34567d
SSDEEP

24576:Jw25Txb7hSxCfb4ycsgloyumNHmZs7y/ItU8dnX8:Jn9bNccDyummZwy/L8dnX

Score

N/A

Malware Config

Signatures

Files

9447588536f2eef999d3186db6cbc8a1a57725769ffeca993155110384c78e07
.exe windows x86

0bc09263496be6911c8a6e4505c77621

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCommandLineA
Beep
Beep
SetCurrentDirectoryW
SetLocaleInfoW
Beep
Beep
VirtualQuery
Beep
Beep
WriteConsoleW
TlsSetValue
GetFullPathNameW
Beep
VirtualProtect
GetFileSize
lstrcmpA
lstrcatA
DeleteFileW
Beep
FormatMessageA
Beep
OpenMutexA
GetCurrentThreadId
Beep
GetPrivateProfileIntA
TlsGetValue
GetModuleHandleA

catsrvut

StartMTSTOCOM
RegDBRestore
CGMIsAdministrator
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE