3e9454b43c50f2edbceaa62adfafdf6e1990732d364448dda97b0a8c609ee4fb

General

Target

3e9454b43c50f2edbceaa62adfafdf6e1990732d364448dda97b0a8c609ee4fb
Size

107KB
MD5

c8aa184457ea2e307082f9c7e16a34ae
SHA1

9a2f9e13f3cbf035b8fa9be52b3a4dd0d5e227b6
SHA256

3e9454b43c50f2edbceaa62adfafdf6e1990732d364448dda97b0a8c609ee4fb
SHA512

f480aab28b17e0672040d13632a9787953d51af84e0d7cd9121f484caeab1a57413d12d5a1e254c160c2557591e0a95393a0640843699c34b43645cc3b05c0d7
SSDEEP

384:++9y+pmODb1mUD5pDXBzEtjwilumsaFu8lXs/SND5kFb7njIOkDi:++9y+UOPUUF/kwGNsa1XND5ojIvDi

Score

N/A

Malware Config

Signatures

Files

3e9454b43c50f2edbceaa62adfafdf6e1990732d364448dda97b0a8c609ee4fb
.exe windows x86

fee05109f3e16cbe5b24865c4ec8990e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
WaitForSingleObject
IsBadCodePtr
GetCommandLineA
ResumeThread
GetFileSize
CloseHandle
VirtualAlloc
GetModuleHandleA
CreateFileA
SetFileAttributesA
EnterCriticalSection
FindVolumeClose
FindAtomA
GetEnvironmentVariableA
ExitProcess
ReleaseMutex
ResetEvent
DeleteFileA
SetEndOfFile
GetExitCodeThread
GetCurrentDirectoryA
GetTickCount
FindVolumeClose
HeapDestroy

wininet

FtpFindFirstFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpDeleteFileA
FtpOpenFileA
FtpPutFileA
FtpGetFileW
FtpCreateDirectoryW
HttpQueryInfoA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 101KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rrlunlm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fee05109f3e16cbe5b24865c4ec8990e

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 101KB - Virtual size: 129KB

rrlunlm Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 101KB - Virtual size: 129KB

rrlunlm
Size: - Virtual size: 4KB