General

  • Target

    IrINi_bot_0.1_public_limited_version_for_win32.rar

  • Size

    1.9MB

  • MD5

    c52acf3396793f97bda614252bd8492d

  • SHA1

    3ebad8fb75e140a2328ab2ae16ce682ac283aeee

  • SHA256

    78fb5c3df8feed78648c6c0160757c890b7f91ed6793ce71ede95334cb96d998

  • SHA512

    ff2ae0a4c529d53dcff3bb5301f5915d25c09253d57abf42cab20679b1ef24aa7c6f470559285d35fad6a39e8efe4c9f28a8e21d6eafe640795bef1d8b7b324d

  • SSDEEP

    49152:1phD3JUnfnlNwRg4Nzen1CLVZ+gTzi5eDI:1fD3SNmRg4Nzen1C9Te4I

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • IrINi_bot_0.1_public_limited_version_for_win32.rar
    .rar

    Password: infected

  • IrINi bot 0.1 public limited version for win32/DbxOpenOdbc.inc
  • IrINi bot 0.1 public limited version for win32/IriNi.cfg
  • IrINi bot 0.1 public limited version for win32/IriNi.dof
  • IrINi bot 0.1 public limited version for win32/IriNi.dpr
  • IrINi bot 0.1 public limited version for win32/Netbios.pas
    .js
  • IrINi bot 0.1 public limited version for win32/OdbcApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/Scanner.pas
  • IrINi bot 0.1 public limited version for win32/autostart.pas
  • IrINi bot 0.1 public limited version for win32/bin/BinToAscii.lnk
    .lnk
  • IrINi bot 0.1 public limited version for win32/bin/IriNi.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • IrINi bot 0.1 public limited version for win32/config.pas
  • IrINi bot 0.1 public limited version for win32/ddos.pas
    .js
  • IrINi bot 0.1 public limited version for win32/def.mor
  • IrINi bot 0.1 public limited version for win32/errors.pas
  • IrINi bot 0.1 public limited version for win32/ftp.pas
  • IrINi bot 0.1 public limited version for win32/ident.pas
  • IrINi bot 0.1 public limited version for win32/irini.res
  • IrINi bot 0.1 public limited version for win32/logger.pas
  • IrINi bot 0.1 public limited version for win32/lsass.pas
  • IrINi bot 0.1 public limited version for win32/main.pas
  • IrINi bot 0.1 public limited version for win32/nt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JWaBthSdpDef.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAF_Irda.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAccCtrl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAclApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaAclUI.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaActiveDS.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsDb.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsErr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsHlp.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsProp.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsTLB.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdsnms.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdssts.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAdtGen.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAtalkWsh.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaAuthif.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaAuthz.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaBLBErr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBatClass.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBits.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBits1_5.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBitsMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBitscfg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBluetoothAPIs.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaBtHDef.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaBugCodes.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaCdErr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaCmnQuery.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaColorDlg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaCpl.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaCplext.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaCryptUIApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDSAdmin.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDSClient.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaDSGetDc.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaDSQuery.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDSRole.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDbt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDde.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDhcpCSdk.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDhcpSSdk.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaDhcpsApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDlgs.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaDsSec.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaDskQuota.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaErrorRep.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaExcpt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaFaxDev.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaFaxExt.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaFaxMmc.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaFaxRoute.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaGPEdit.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaHhError.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaHtmlGuid.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaHtmlHelp.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIAccess.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaIAdmExt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIcmpApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIisCnfg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaImageHlp.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaImapi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaImapiError.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIme.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIoEvent.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpExport.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpHlpApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpIfCons.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpInfoId.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpRtrMib.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIpTypes.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIsGuids.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaIssPer16.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLM.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmAccess.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmAlert.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmApiBuf.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmAt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmAudit.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmConfig.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmCons.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmDFS.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmErr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmErrLog.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmJoin.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmRemUtl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmRepl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmSName.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmServer.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmShare.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmStats.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmSvc.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmUse.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmUseFlg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLmWkSta.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLoadPerf.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaLpmApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaMSTcpIP.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaMSWSock.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaMciAvi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaMprError.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaMsTask.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaMsi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaMsiDefs.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaMsiQuery.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNb30.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNetSh.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaNspApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtDdPar.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtDsApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtDsBMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtDsbCli.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtLDAP.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtQuery.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtSecApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaNtStatus.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaObjSel.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaPatchApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaPatchWiz.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaPbt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaPdh.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaPdhMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaPowrProf.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaPrSht.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaProfInfo.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaProtocol.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaPsApi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaQos.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaQosName.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaQosPol.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaQosSp.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaReason.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRegStr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpc.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpcASync.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpcDce.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpcNsi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpcNtErr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaRpcSsl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSceSvc.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaSchedule.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSchemaDef.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSddl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSecExt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSecurity.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSens.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSensAPI.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSensEvts.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSfc.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaShlGuid.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSisBkUp.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaSnmp.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaSpOrder.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaSrRestorePtApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSspi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaSubAuth.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaSvcGuid.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaTlHelp32.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaTmSchema.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaTraffic.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaUserEnv.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaUxTheme.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPApi.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPApiMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPCrsMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPFtpMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPPstMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPSpiHlp.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPTypes.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWPWizMsg.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWS2atm.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWS2dnet.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWS2spi.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWS2tcpip.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWSNwLink.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWShisotp.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWSipx.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWSnetbs.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWSvns.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWbemCli.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinAble.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinBase.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinBer.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinCon.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinCpl.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinCred.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinCrypt.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinDNS.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinEFS.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinError.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinFax.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinGDI.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinIoctl.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinLDAP.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinNLS.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinNT.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinNetWk.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinPerf.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinReg.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinResrc.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinSafer.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinSock.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinSvc.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinType.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinUser.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinVer.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinWlx.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWinsock2.pas
    .js
  • IrINi bot 0.1 public limited version for win32/nt/JwaWmiStr.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWowNT16.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWowNT32.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWs2Bth.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWsrm.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaWtsApi32.pas
  • IrINi bot 0.1 public limited version for win32/nt/JwaZMOUSE.pas
  • IrINi bot 0.1 public limited version for win32/nt/WinDefines.inc
  • IrINi bot 0.1 public limited version for win32/nt/readme.html
    .html
  • IrINi bot 0.1 public limited version for win32/password.pas
  • IrINi bot 0.1 public limited version for win32/readme.txt
  • IrINi bot 0.1 public limited version for win32/shellcode.pas
  • IrINi bot 0.1 public limited version for win32/sql.pas
  • IrINi bot 0.1 public limited version for win32/stuff.pas
    .js
  • IrINi bot 0.1 public limited version for win32/todo.txt
  • IrINi bot 0.1 public limited version for win32/updates.txt
  • IrINi bot 0.1 public limited version for win32/winsck2/u_winsck2.dcu
  • IrINi bot 0.1 public limited version for win32/winsck2/u_winsck2.pas
    .js
  • IrINi bot 0.1 public limited version for win32/winsck2/ws2tcpip.inc
  • IrINi bot 0.1 public limited version for win32/winsck2/wsipx.inc
  • IrINi bot 0.1 public limited version for win32/winsck2/wsnetbs.inc
  • IrINi bot 0.1 public limited version for win32/winsck2/wsnwlink.inc