63a93f05de936435c5b1a1ba3cd3f73e43c2c83b0b876b836efa62ff271e292f

General

Target

63a93f05de936435c5b1a1ba3cd3f73e43c2c83b0b876b836efa62ff271e292f
Size

59KB
MD5

0597674225e0fcf4dee6f62b0c3ea1a6
SHA1

ece206011c6531a31dac1a4bbc716f1f4b2bd962
SHA256

63a93f05de936435c5b1a1ba3cd3f73e43c2c83b0b876b836efa62ff271e292f
SHA512

478050a054baf43ae2a1058f605009bf50a77eb28b9d57ebe933fcb3595c0d9860abcb2c255b3e82c6f9c6d11d9fa3828b7dcc5bdf1f886aef35420bb9633190
SSDEEP

1536:iyye9IUrTZeGD525DFtYLV2iL6OGuF1h1nPXYvdg8lkVFj/Q:iyyetrteGD+Hsh6efIvR4u

Score

N/A

Malware Config

Signatures

Files

63a93f05de936435c5b1a1ba3cd3f73e43c2c83b0b876b836efa62ff271e292f
.exe windows x86

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ExitProcess
GetEnvironmentVariableA
FindAtomA
VirtualAlloc
CloseHandle
DeleteFileA
GetModuleHandleA
EnterCriticalSection
GetFileSize
FindVolumeClose
GetCommandLineA
HeapSize
SetEndOfFile
HeapDestroy
CreateFileA
GetExitCodeThread
GetCurrentDirectoryA
ResetEvent
WaitForSingleObject
ResumeThread
FindVolumeClose
IsBadCodePtr
GetTickCount
SetFileAttributesA

wininet

FtpCreateDirectoryW
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW
FtpPutFileA
FtpFindFirstFileA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hdnohfm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

hdnohfm Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

hdnohfm
Size: - Virtual size: 4KB