ec254a818f79cb25620a45080c3aea49ee16103db3b9b2d561316f4620b1187a

General

Target

ec254a818f79cb25620a45080c3aea49ee16103db3b9b2d561316f4620b1187a
Size

59KB
MD5

74dfb90ace6429699f6173169f5ff5d8
SHA1

f023e88155e133e459392eab80082a645d646e09
SHA256

ec254a818f79cb25620a45080c3aea49ee16103db3b9b2d561316f4620b1187a
SHA512

701cbf09065f50efcf476980ea04680ee7cff419f83e0735d5d4bccf93664efcca8ec8cb4924d11eba9e576535f1e73cc224ca65c3b051d76ede630e42c24373
SSDEEP

1536:syye9IUrTZeGD525DFtYLV2iL6OGuF1h1nPXYvdg8lkVFj/Q:syyetrteGD+Hsh6efIvR4u

Score

N/A

Malware Config

Signatures

Files

ec254a818f79cb25620a45080c3aea49ee16103db3b9b2d561316f4620b1187a
.exe windows x86

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ExitProcess
GetEnvironmentVariableA
FindAtomA
VirtualAlloc
CloseHandle
DeleteFileA
GetModuleHandleA
EnterCriticalSection
GetFileSize
FindVolumeClose
GetCommandLineA
HeapSize
SetEndOfFile
HeapDestroy
CreateFileA
GetExitCodeThread
GetCurrentDirectoryA
ResetEvent
WaitForSingleObject
ResumeThread
FindVolumeClose
IsBadCodePtr
GetTickCount
SetFileAttributesA

wininet

FtpCreateDirectoryW
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW
FtpPutFileA
FtpFindFirstFileA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lvezocf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

lvezocf Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

lvezocf
Size: - Virtual size: 4KB