0a2a100535763e98faea7c456aa1c3fcb5cd2979f1d59dd7823aa987b50d562f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a2a100535763e98faea7c456aa1c3fcb5cd2979f1d59dd7823aa987b50d562f
Size

816KB
MD5

abe796fc5c7fd8d95050f9d645fe5f7d
SHA1

c4a48b28d93a9bf1b68c82f28d98baade69a427c
SHA256

0a2a100535763e98faea7c456aa1c3fcb5cd2979f1d59dd7823aa987b50d562f
SHA512

81b3d3125ed3af8456f4205f3cdee3275623347febe75378d8a712fe316a5f1758ed284ff71e6715d78bcfc353af39e84d6dffd1470a648403796ac08b35c6c4
SSDEEP

24576:Ckkybq7ANDGldVwEp29h9Lc7RjEGRdYO0e:nZWoD0Pp2z9A7RjEGv8e

Score

N/A

Malware Config

Signatures

Files

0a2a100535763e98faea7c456aa1c3fcb5cd2979f1d59dd7823aa987b50d562f
.exe windows x86

a96fc24673d665a1f23f9caf555cb6ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
Beep
TlsSetValue
GetFullPathNameW
GetModuleHandleA
Beep
VirtualProtect
Beep
WriteConsoleW
GetModuleFileNameW
Beep
GetPrivateProfileIntA
SetCurrentDirectoryW
Beep
TlsGetValue
Beep
Beep
GetCurrentThreadId
DeleteFileW
Beep
SetThreadPriority
Beep
ReleaseMutex
SetLocaleInfoA
lstrlenW
VirtualQuery
GetCommandLineA
lstrcatA
Beep

catsrvut

RegDBBackup
StartMTSTOCOM
CGMIsAdministrator
RegDBRestore

Sections

.text
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ