General
-
Target
sd_bot_all.zip
-
Size
393KB
-
MD5
06b17aecd7f744a502f0789f88c1e4c3
-
SHA1
47cf0991e907ea69db79a342913fbb8f93e98532
-
SHA256
8074ec5af0fff03c05d1077d6b8a7d1c944829a1298753f13d5f1cc6d536a3a2
-
SHA512
8de2abf1aec42c94319da4ce66b842ee85fc56dbed724de25904155a6f3a202e6453fdbcb86601bb040c37c7258a4b2738bf99ff4fda9de01054722cebf3dff7
-
SSDEEP
12288:qIdRHxp4LxXoUW4kzan2bTfWPn6jh15yt:qId5x2MZzan2bDWcyt
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
sd_bot_all.zip
Password: infected
-
SDbot05b-getadm.rar
Password: infected
-
SDbot05b-getadm/commandref.html
-
SDbot05b-getadm/make-lcc.bat
-
SDbot05b-getadm/make-mingw.bat
-
SDbot05b-getadm/readme.txt
-
SDbot05b-getadm/sdbot.jpg
-
SDbot05b-getadm/sdbot05b.c
-
SDbot05b-getadm/sdbot05b.cpp
-
SDbot05b-getadm/sdbot05b.dsp
-
SDbot05b-getadm/sdbot05b.dsw
-
SDbot05b-getadm/sdbot05b.sln
-
SDbot05b-getadm/sdbot05b.suo
-
SDbot05b-getadm/sdbot05b.vcproj
-
sd_fake_xdcc_by_Synco.zip
Password: infected
-
Icon.ico
-
commandref.html
-
lcc/Makefile
-
make-lcc.bat
-
make-mingw.bat
-
readme.txt
-
resource.h
-
sd.prj
-
sdbot.jpg
-
sdbot05b.c
-
sdbot05b.obj
-
sdbot05b.~c
-
syncbot.aps
-
syncbot.rc
-
sdbot05a.rar
Password: infected
-
sdbot05a/SDBOT05A.CPP
-
sdbot05a/commandref.html
-
sdbot05a/make.bat
-
sdbot05a/readme.txt
-
sdbot05a/sdbot.jpg
-
sdbot05a/sdbot05a.c
-
sdbot05a/sdbot05a.dsp
-
sdbot05a/sdbot05a.dsw
-
sdbot05b-AE.zip
Password: infected
-
AE.txt
-
SRT.lib
-
make.bat
-
sdbot05b.asm
-
sdbot05b.c
-
sdbot05b-ago.rar
Password: infected
-
sdbot/client.h
-
sdbot/commandref.html
-
sdbot/mac.cpp
-
sdbot/make-lcc.bat
-
sdbot/make-mingw.bat
-
sdbot/readme.txt
-
sdbot/sdbot.h
-
sdbot/sdbot.jpg
-
sdbot/sdbot05b.cpp
-
sdbot/sdbot05b.dsp
-
sdbot/sdbot05b.dsw
-
sdbot05b.zip
Password: infected
-
commandref.html
-
make-lcc.bat
-
make-mingw.bat
-
readme.txt
-
sdbot.jpg
-
sdbot05b.c
-
sdbot05b.cpp
-
sdbot05b.dsp
-
sdbot05b.dsw
-
sdbot05b_syn_&_nick.rar
Password: infected
-
commandref.html
-
make-lcc.bat
-
readme.txt
-
sdbot.jpg
-
sdbot05b.c
-
sdbot_syn_secure_1.zip
Password: infected
-
README.txt
-
SDBOT05B.C
-
crypt.h
-
make-lcc.bat
-
md5.c
-
md5sum.c
-
tools/cryptstr.exe
e3f03b57f8c82ef8407ef77387caf7ef
Headers
Imports
Sections
-
tools/cryptstr.tar.gz
-
tools/mkpasswd.exe
a1750d7b3ec33bc47fd97f1c4db89efe
Headers
Imports
Sections
-
tools/mkpasswd.tar.gz
-
tools/upx.exe
Headers
Sections