12914bbe059df0726eb94ab880975863fac8a3f7a4ef54d8393caec9a89bccc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12914bbe059df0726eb94ab880975863fac8a3f7a4ef54d8393caec9a89bccc7
Size

816KB
MD5

260db3482b243cd1f26e9a3e7b4a82a6
SHA1

6d4ab18bb6992e24cd00ed886854dfb7c2204427
SHA256

12914bbe059df0726eb94ab880975863fac8a3f7a4ef54d8393caec9a89bccc7
SHA512

6e6c9de92ec2195d404f93bad544e4430440593e750ace725750a5efadbbe4d586ea1c793c706d3db26c69b3c8943afe77bb2860c4b6182c658a0bbbafad421e
SSDEEP

24576:ijLJkd7upAcaptoDtoFLi+s1K1esVq7Tp:xcAcyuDKLLeK1eL7

Score

N/A

Malware Config

Signatures

Files

12914bbe059df0726eb94ab880975863fac8a3f7a4ef54d8393caec9a89bccc7
.exe windows x86

cf910ffdbfa181acedca2dbb6c495522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
Beep
GetPrivateProfileIntA
Beep
GetCommandLineA
TlsGetValue
SetCurrentDirectoryW
TlsSetValue
Beep
FormatMessageA
Beep
VirtualProtect
VirtualQuery
Beep
Beep
ReleaseMutex
Beep
lstrcatA
GetModuleHandleA
Beep
SetLocaleInfoA
lstrlenW
Beep
SetThreadPriority
GetCurrentThreadId
Beep
DeleteFileW
GetModuleFileNameW
GetFullPathNameW

catsrvut

StartMTSTOCOM
CGMIsAdministrator
RegDBRestore
RegDBBackup

Sections

.text
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ