4ce49f6624c0dc20543f6134cc90140b

General

Target

4ce49f6624c0dc20543f6134cc90140b
Size

60KB
MD5

4ce49f6624c0dc20543f6134cc90140b
SHA1

5de6c7304365abf4385fa2e3772a677d4309f661
SHA256

f2590137b9bc784abda082bf23ea86b02146ce02f8cec67ecf3bf922d19bde9a
SHA512

248da476348ee8daad85dcb063105b6acd350ef503816a2cc965c413b757e8ac27dfba546ec787f64efd07922c167d2039012ad588960330fc44b12a3d7a1660
SSDEEP

1536:Pyye9IUrTZeGD525DFtYLV2iL6OGuF1h1nPXYvdg8lkVFj/QF:PyyetrteGD+Hsh6efIvR4uF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ce49f6624c0dc20543f6134cc90140b

Files

4ce49f6624c0dc20543f6134cc90140b
.exe windows:4 windows x86 arch:x86

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ExitProcess
GetEnvironmentVariableA
FindAtomA
VirtualAlloc
CloseHandle
DeleteFileA
GetModuleHandleA
EnterCriticalSection
GetFileSize
FindVolumeClose
GetCommandLineA
HeapSize
SetEndOfFile
HeapDestroy
CreateFileA
GetExitCodeThread
GetCurrentDirectoryA
ResetEvent
WaitForSingleObject
ResumeThread
FindVolumeClose
IsBadCodePtr
GetTickCount
SetFileAttributesA

wininet

FtpCreateDirectoryW
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW
FtpPutFileA
FtpFindFirstFileA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache

sisbkup

SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bxrbrmf
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c24215e9b0dc95c015e977087b951bc2

Headers

File Characteristics

Imports

kernel32

wininet

sisbkup

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 55KB - Virtual size: 82KB

bxrbrmf Size: - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 55KB - Virtual size: 82KB

bxrbrmf
Size: - Virtual size: 4KB