SecuriteInfo[.]com[.]not-a-virus[.]Server-FTP[.]Win32[.]SFH[.]10887[.]19534

Sharing

Copy URL

Twitter E-mail

General

Target

SecuriteInfo.com.not-a-virus.Server-FTP.Win32.SFH.10887.19534
Size

1.2MB
MD5

b6401b5b0254dc9b20691f13d6089a9a
SHA1

0e75de0af345dbbdf3339a945397446cf5b66bbd
SHA256

ce7a72d2347fe2011815098caa7b5cb881a97780634ff1354194ab4865a6e0c4
SHA512

8f2f3f961b7f081fac6b1cad1f659e60ead03c3dc0792a22f631016bcaf5b7938d529d898b397f6e1902e363553c5729679bca2052000f2ada4a8db412c5a9f1
SSDEEP

24576:iR22fuzAfYMJabwTcoqmzuuYe02XJ+jQ5H8II45gbEMgL8:N2fuzuIbHTm7J+9FhG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.not-a-virus.Server-FTP.Win32.SFH.10887.19534

Files

SecuriteInfo.com.not-a-virus.Server-FTP.Win32.SFH.10887.19534
.exe windows:4 windows x86

3ede871f504dee75b485f08c01cf3ea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 724KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: - Virtual size: 89KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 45KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

11
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3ede871f504dee75b485f08c01cf3ea1

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 724KB - Virtual size: 1.5MB

1 Size: 7KB - Virtual size: 18KB

2 Size: 27KB - Virtual size: 27KB

3 Size: - Virtual size: 1.5MB

4 Size: 5KB - Virtual size: 14KB

5 Size: - Virtual size: 64B

6 Size: 512B - Virtual size: 24B

7 Size: - Virtual size: 89KB

8 Size: 363KB - Virtual size: 363KB

9 Size: 45KB - Virtual size: 70KB

10 Size: 3KB - Virtual size: 3KB

11 Size: 7KB - Virtual size: 28KB

0
Size: 724KB - Virtual size: 1.5MB

1
Size: 7KB - Virtual size: 18KB

2
Size: 27KB - Virtual size: 27KB

3
Size: - Virtual size: 1.5MB

4
Size: 5KB - Virtual size: 14KB

5
Size: - Virtual size: 64B

6
Size: 512B - Virtual size: 24B

7
Size: - Virtual size: 89KB

8
Size: 363KB - Virtual size: 363KB

9
Size: 45KB - Virtual size: 70KB

10
Size: 3KB - Virtual size: 3KB

11
Size: 7KB - Virtual size: 28KB