2ecb6e87d6df048b5752f9d4c93baac2938215d5eb473578f304fee238493b99

General

Target

2ecb6e87d6df048b5752f9d4c93baac2938215d5eb473578f304fee238493b99
Size

100KB
MD5

642dbd51414fe5e6a6a10bf76a90f3d0
SHA1

0b0c7a0b99e960e526389db231f8a6fd5f29bbde
SHA256

2ecb6e87d6df048b5752f9d4c93baac2938215d5eb473578f304fee238493b99
SHA512

90e8cc3465440745aff6cee0b29c13a595b3ef8b2624c9d66ce888e7a5f7119f9e19004c10c94f9549f772c5a5531773c974ef62f5b251be857a2bbbb291169d
SSDEEP

1536:Iyyy57XIMCGBWgMuLefJscKocngQPx6lwTRKOpZtBZMfJmMyyF3:Iyyy585GsNKsJ7K2QPx4wVKOTDyF3

Score

N/A

Malware Config

Signatures

Files

2ecb6e87d6df048b5752f9d4c93baac2938215d5eb473578f304fee238493b99
.exe windows x86

98e59d1d12e3b429f62e1f3fdd6dbd5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
EnterCriticalSection
DeleteFileA
ResumeThread
SetEndOfFile
VirtualAlloc
GetTickCount
ResetEvent
GetCurrentDirectoryA
GetExitCodeThread
GetCommandLineA
IsBadCodePtr
WaitForSingleObject
CreateFileA
GetEnvironmentVariableA
HeapDestroy
SetFileAttributesA
FindAtomA
HeapSize
ExitProcess
GetModuleHandleA
FindVolumeClose
FindVolumeClose
GetFileSize
ReleaseMutex

wininet

FindCloseUrlCache
FtpFindFirstFileA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
FtpPutFileA
FtpCreateDirectoryW
HttpEndRequestA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpQueryInfoA
DeleteUrlCacheEntryA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gvpfcbc
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

98e59d1d12e3b429f62e1f3fdd6dbd5b

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 94KB - Virtual size: 122KB

gvpfcbc Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 94KB - Virtual size: 122KB

gvpfcbc
Size: - Virtual size: 4KB