0ed118b77146079d8ac1043754a9f34b79f53219fe0cc8178839ad3932f1d08b

General

Target

0ed118b77146079d8ac1043754a9f34b79f53219fe0cc8178839ad3932f1d08b
Size

59KB
MD5

71dcfd2ae3faacd505d6cb669fe08035
SHA1

4bc8a417672a3b03153d45fec69fc884202991a1
SHA256

0ed118b77146079d8ac1043754a9f34b79f53219fe0cc8178839ad3932f1d08b
SHA512

2c503c62dcf0fbb02cb107bccdba6a7aec672f1df8338fbf268af5ecd4a93c31c0cb2d14e061ae61e1d7e34485c0318904b3a6fcae2044b65153fab6f396b09f
SSDEEP

1536:6yySMUrTZeGD525DFtYLV2iL6OGuF1h1LmX+dLnkO1:6yySHrteGD+Hsh6eywLF1

Score

N/A

Malware Config

Signatures

Files

0ed118b77146079d8ac1043754a9f34b79f53219fe0cc8178839ad3932f1d08b
.exe windows x86

4f98572f24bbfc6f6ae9a7a24ac491b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
VirtualAlloc
HeapDestroy
CloseHandle
IsBadCodePtr
ResumeThread
GetExitCodeThread
ReleaseMutex
CreateFileA
GetFileSize
EnterCriticalSection
FindVolumeClose
GetCommandLineA
HeapSize
GetTickCount
DeleteFileA
ResetEvent
SetFileAttributesA
GetCurrentDirectoryA
FindAtomA
ExitProcess
FindVolumeClose
SetEndOfFile
GetModuleHandleA
GetEnvironmentVariableA

wininet

FtpGetFileW
FtpPutFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
FtpFindFirstFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpGetCurrentDirectoryW
FtpOpenFileA

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ybcoiws
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f98572f24bbfc6f6ae9a7a24ac491b4

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

ybcoiws Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

ybcoiws
Size: - Virtual size: 4KB