1ff13c710dd793f9d1d5efa6fa852d83a2b57f36fe707708a785f12ca7ef48d5

General

Target

1ff13c710dd793f9d1d5efa6fa852d83a2b57f36fe707708a785f12ca7ef48d5
Size

59KB
MD5

f40badd793ab197dc62a319fb96883e8
SHA1

9e769a533b5087da3a63933c052c6170656d7fc5
SHA256

1ff13c710dd793f9d1d5efa6fa852d83a2b57f36fe707708a785f12ca7ef48d5
SHA512

d44432d883bd042ba0d55e79fac87f14e5338aa9dfceb959a3506e5c335f678a12768da47dca511a163c1187ebd2b38d1998cc10386abf5c5a302d6131215b19
SSDEEP

1536:vyye9IUrTZeGD525DFtYLV2iL6OGuF1h1nPXYvdg8lkVFj/Q:vyyetrteGD+Hsh6efIvR4u

Score

N/A

Malware Config

Signatures

Files

1ff13c710dd793f9d1d5efa6fa852d83a2b57f36fe707708a785f12ca7ef48d5
.exe windows x86

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ExitProcess
GetEnvironmentVariableA
FindAtomA
VirtualAlloc
CloseHandle
DeleteFileA
GetModuleHandleA
EnterCriticalSection
GetFileSize
FindVolumeClose
GetCommandLineA
HeapSize
SetEndOfFile
HeapDestroy
CreateFileA
GetExitCodeThread
GetCurrentDirectoryA
ResetEvent
WaitForSingleObject
ResumeThread
FindVolumeClose
IsBadCodePtr
GetTickCount
SetFileAttributesA

wininet

FtpCreateDirectoryW
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW
FtpPutFileA
FtpFindFirstFileA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lhkpmxd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

lhkpmxd Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

lhkpmxd
Size: - Virtual size: 4KB