18d3c8af762788b7e0fa1509ae2846f6bf9425f612dd5f772f6cddb576006d48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18d3c8af762788b7e0fa1509ae2846f6bf9425f612dd5f772f6cddb576006d48
Size

816KB
MD5

3e7dab978c8e0a9923d42f87704d563a
SHA1

002844b1072396258c1ec0632923dcf6e5bd3248
SHA256

18d3c8af762788b7e0fa1509ae2846f6bf9425f612dd5f772f6cddb576006d48
SHA512

59bda3add7f30b364725d236daf248988234a27b8970850e7b6030512db40800b779c1ed3de4fe53a0cd0ce04eb65de4ba4701b86df3e1ac9f8cf6d70e61cf7a
SSDEEP

12288:aDomLDFZyP4PcYTctV6l4SzplIvrQ3+djIps2e7Vm4oDAfNn/VSKtNlDzmUf:a8mLnWM6VNSdqv0OdADThDWdSK3lTf

Score

N/A

Malware Config

Signatures

Files

18d3c8af762788b7e0fa1509ae2846f6bf9425f612dd5f772f6cddb576006d48
.exe windows x86

cfb21b809a4688e8075c1b2756dd486f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
lstrcmpA
SetLocaleInfoW
VirtualProtect
FormatMessageA
GetCommandLineA
Beep
OpenMutexA
Beep
SetThreadPriority
Beep
Beep
WriteConsoleW
ReleaseMutex
GetCurrentThreadId
TlsGetValue
DeleteFileW
Beep
VirtualQuery
TlsSetValue
Beep
Beep
GetFullPathNameW
GetModuleHandleA
lstrcatA
Beep
SetCurrentDirectoryW
Beep
GetPrivateProfileIntA

catsrvut

RegDBRestore
StartMTSTOCOM
CGMIsAdministrator
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE