031319473830c9a5ea7656e1c281b4165048cacba18667613091a855a2607579 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

031319473830c9a5ea7656e1c281b4165048cacba18667613091a855a2607579
Size

816KB
MD5

24e3d86452e05d19273156f7afd35c11
SHA1

ce3d51aca543bce53ab184ba419abcaecfdde37e
SHA256

031319473830c9a5ea7656e1c281b4165048cacba18667613091a855a2607579
SHA512

95fb9fac707764bbe848c361f7d7e70ff30b3f4aab1197be19ef6b976ec5bbcfdbf4747feba870124b2fe62088907aec9517de7700517b533e345b76dde0a160
SSDEEP

24576:ZbZvZ01imLUuHtb+Zoa4QSGzJzYau0lGi:ZbZWzJ+ZoRQSGSaI

Score

N/A

Malware Config

Signatures

Files

031319473830c9a5ea7656e1c281b4165048cacba18667613091a855a2607579
.exe windows x86

2aea216b780823c401b7e7baf7ebd22b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
WriteConsoleW
Beep
lstrlenW
GetModuleHandleA
GetCurrentThreadId
FormatMessageA
GetCommandLineA
Beep
SetThreadPriority
Beep
SetCurrentDirectoryW
Beep
SetLocaleInfoA
TlsSetValue
Beep
VirtualQuery
Beep
Beep
GetFullPathNameW
TlsGetValue
GetModuleFileNameW
DeleteFileW
Beep
GetPrivateProfileIntA
VirtualProtect
Beep
ReleaseMutex
Beep

catsrvut

RegDBBackup
CGMIsAdministrator
RegDBRestore
StartMTSTOCOM

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ