99c1191d3c216450581dfdfc91a818e3a5ce4c52ea8ba544f75fa44006c40d3a

General

Target

99c1191d3c216450581dfdfc91a818e3a5ce4c52ea8ba544f75fa44006c40d3a
Size

52KB
MD5

fb35b957b349139cc2c9407e6dfd713f
SHA1

649ce636ac8c168c778437c0d87be4a2bb1b0f06
SHA256

99c1191d3c216450581dfdfc91a818e3a5ce4c52ea8ba544f75fa44006c40d3a
SHA512

c25281e09c46bd0f54be424ec6f8f3474be98dfd44563c67e75ad8d51fb6cb38acb1873b94fe2dd190ee853099521d02f27e646df22e6b01b4ef5cb2f5f08c10
SSDEEP

768:9V+9y9nac8Tl86b30adKNMF0zibamGcqpcHBLZkL0Rj6pO1rda8QGnaoWrl+CQ+q:byydaP0asNw1VGc+cXkw+kZEjL8xw

Score

N/A

Malware Config

Signatures

Files

99c1191d3c216450581dfdfc91a818e3a5ce4c52ea8ba544f75fa44006c40d3a
.exe windows x86

c412f9333884fa8046cc145e2e565932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileA
ExitProcess
GetModuleHandleA
VirtualAlloc
SetFileAttributesA
IsBadCodePtr
FindVolumeClose
CreateFileA
GetEnvironmentVariableA
ResumeThread
FindAtomA
GetCommandLineA
FindVolumeClose
GetExitCodeThread
ReleaseMutex
WaitForSingleObject
HeapSize
GetCurrentDirectoryA
SetEndOfFile
GetTickCount
EnterCriticalSection
HeapDestroy
ResetEvent
GetFileSize

wininet

FtpPutFileA
FtpGetFileW
FindCloseUrlCache
FtpCreateDirectoryW
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpFindFirstFileA
FtpGetCurrentDirectoryW
FtpOpenFileA
HttpEndRequestA
HttpQueryInfoA
DeleteUrlCacheEntryA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jbgzozy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c412f9333884fa8046cc145e2e565932

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

jbgzozy Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

jbgzozy
Size: - Virtual size: 4KB