1dd1304d65e4604929a2ea922d9b201692fba0349174919a04c346ce3d1fd5d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dd1304d65e4604929a2ea922d9b201692fba0349174919a04c346ce3d1fd5d6
Size

815KB
MD5

72126325ebcf977e022bf3280f1e486a
SHA1

d63a03c25d2b28e68787eb7741423a0072e215a8
SHA256

1dd1304d65e4604929a2ea922d9b201692fba0349174919a04c346ce3d1fd5d6
SHA512

10bd90f6ab7c1624184b03adb3c6b7fe9d8daf07fd2cb5fc6bb5a5006bcafbf073b18c13d09fb22b427011de66b59d0d43172cf9ab9bb0588521beec3acd9e86
SSDEEP

24576:rACOP12aybJsOtN21US54gljOxjvX4/m:rACOPPYsIA1US54gl5/

Score

N/A

Malware Config

Signatures

Files

1dd1304d65e4604929a2ea922d9b201692fba0349174919a04c346ce3d1fd5d6
.exe windows x86

41d4e7e597917f9e63fc750c16cd04ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetFileSize
GetCommandLineA
Beep
WriteConsoleW
GetPrivateProfileIntA
Beep
FormatMessageA
TlsGetValue
Beep
Beep
VirtualFree
Beep
SetThreadPriority
GetDiskFreeSpaceA
Beep
Beep
Beep
GetCurrentThreadId
DeleteFileW
GetModuleHandleA
SetLocaleInfoW
lstrcmpA
Beep
lstrcatA
Beep
SetCurrentDirectoryW
VirtualProtect
OpenMutexA

catsrvut

CGMIsAdministrator
RegDBBackup
RegDBRestore
StartMTSTOCOM

Sections

.TEXT
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE