5d38994666bc3ce59f4328f86570f459d7853f814980aee63383e7f8c2531b62

General

Target

5d38994666bc3ce59f4328f86570f459d7853f814980aee63383e7f8c2531b62
Size

59KB
MD5

7a3402cb3fdae49d7b63686ba8d7f48f
SHA1

d8132fd59e1f797544d3316a1b1146a072cff963
SHA256

5d38994666bc3ce59f4328f86570f459d7853f814980aee63383e7f8c2531b62
SHA512

df409fbcc06f0c57f17e1cdda49d825967888953ffc49f04be8f7aa559780581bff2c38de26d87b154b47b93796f6099f256a9101bfe55195a3b339bcb4a01e8
SSDEEP

1536:3yyWUrTZeGD525DFtYLV2iL6OGuF1h1YGnZyFfz/F30Gi3dAi:3yyVrteGD+Hsh6elZydZrUdA

Score

N/A

Malware Config

Signatures

Files

5d38994666bc3ce59f4328f86570f459d7853f814980aee63383e7f8c2531b62
.exe windows x86

5dfdcbaa2d3f5cf0c103ea94807f736f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
FindAtomA
GetEnvironmentVariableA
CloseHandle
IsBadCodePtr
GetTickCount
GetExitCodeThread
GetFileSize
ReleaseMutex
FindVolumeClose
CreateFileA
VirtualAlloc
HeapDestroy
SetEndOfFile
GetCommandLineA
ExitProcess
ResetEvent
GetCurrentDirectoryA
DeleteFileA
EnterCriticalSection
SetFileAttributesA
HeapSize
WaitForSingleObject
FindVolumeClose
GetModuleHandleA

wininet

DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpPutFileA
FindCloseUrlCache
FtpOpenFileA
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpCreateDirectoryW
FtpDeleteFileA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eduqced
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5dfdcbaa2d3f5cf0c103ea94807f736f

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

eduqced Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

eduqced
Size: - Virtual size: 4KB