505dd9c6f9a2af0e9d69174ecbb3992b0382f7d8e1da6a3edb972cfb94c61ba9

General

Target

505dd9c6f9a2af0e9d69174ecbb3992b0382f7d8e1da6a3edb972cfb94c61ba9
Size

59KB
MD5

04c52511c865e68bfc09b065af6e2759
SHA1

c8fc9c5a6a9201d5c0fb05b69ae468ceef3a3875
SHA256

505dd9c6f9a2af0e9d69174ecbb3992b0382f7d8e1da6a3edb972cfb94c61ba9
SHA512

85f70cebef7fdd84013e02087f8a981ef31ef4f15f5c990edf65a155d2f621689a4d44e6347d32a2e34ab657c26e5a161f1c19221b8b084d3b5a3a2db0b876f8
SSDEEP

1536:Cyye9IUrTZeGD525DFtYLV2iL6OGuF1h1nPXYvdg8lkVFj/Q:CyyetrteGD+Hsh6efIvR4u

Score

N/A

Malware Config

Signatures

Files

505dd9c6f9a2af0e9d69174ecbb3992b0382f7d8e1da6a3edb972cfb94c61ba9
.exe windows x86

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ExitProcess
GetEnvironmentVariableA
FindAtomA
VirtualAlloc
CloseHandle
DeleteFileA
GetModuleHandleA
EnterCriticalSection
GetFileSize
FindVolumeClose
GetCommandLineA
HeapSize
SetEndOfFile
HeapDestroy
CreateFileA
GetExitCodeThread
GetCurrentDirectoryA
ResetEvent
WaitForSingleObject
ResumeThread
FindVolumeClose
IsBadCodePtr
GetTickCount
SetFileAttributesA

wininet

FtpCreateDirectoryW
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW
FtpPutFileA
FtpFindFirstFileA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nziydku
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

nziydku Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

nziydku
Size: - Virtual size: 4KB