e69ed2c1c522ac9d7260d6253085fe5f32a58a13f7e0b8de1b5572c8c27adfe5

General

Target

e69ed2c1c522ac9d7260d6253085fe5f32a58a13f7e0b8de1b5572c8c27adfe5
Size

107KB
MD5

beb0bfe8f2ea7d8aee5fc705ff7217f2
SHA1

9d232a954f69bedb4ec2dbf08cac1c5bd830ae1c
SHA256

e69ed2c1c522ac9d7260d6253085fe5f32a58a13f7e0b8de1b5572c8c27adfe5
SHA512

eb2dc3be19d90b5a36f457e6adf60700e8138e91f796a01538f5a20e9a4edd7deb7d84f27773f59c8603bdfba6292cb21ebf69e7f0ab08e337d7332c703d91ec
SSDEEP

1536:byyi3lkwGXltWqDCnntLSMX1XVKTDHTznqCzB3YJ4/hJptJVWO6mf48MMi4tbSGt:byyiAOqDpMX1mqxkhJpHVWcfJ64UGt

Score

N/A

Malware Config

Signatures

Files

e69ed2c1c522ac9d7260d6253085fe5f32a58a13f7e0b8de1b5572c8c27adfe5
.exe windows x86

fee05109f3e16cbe5b24865c4ec8990e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
WaitForSingleObject
IsBadCodePtr
GetCommandLineA
ResumeThread
GetFileSize
CloseHandle
VirtualAlloc
GetModuleHandleA
CreateFileA
SetFileAttributesA
EnterCriticalSection
FindVolumeClose
FindAtomA
GetEnvironmentVariableA
ExitProcess
ReleaseMutex
ResetEvent
DeleteFileA
SetEndOfFile
GetExitCodeThread
GetCurrentDirectoryA
GetTickCount
FindVolumeClose
HeapDestroy

wininet

FtpFindFirstFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpDeleteFileA
FtpOpenFileA
FtpPutFileA
FtpGetFileW
FtpCreateDirectoryW
HttpQueryInfoA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mfwdahl
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fee05109f3e16cbe5b24865c4ec8990e

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 102KB - Virtual size: 129KB

mfwdahl Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 102KB - Virtual size: 129KB

mfwdahl
Size: - Virtual size: 4KB