Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 04ba40662923be168ca4dc2da924a0d0 --

Hashes
MD5: 04ba40662923be168ca4dc2da924a0d0
SHA1: 94baf53938685401cdfd1bff0248582cc504ab7e
SHA256: c1f6f5c2cb8ee4ca4e4e4362eea1ae22c0c932e10e06917b83d9c3dde43f88d0
SSDEEP: 3072:mbrUqwyNWSY5lm/JRPo7wULV4KyGho9eV5elCPCu+N5nfp3PLGnf:mbYgkSY56bcuGht//RS1yf
Details
File Type: PE32
Yara Hits
YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h | YRP/IsPE32 | YRP/IsDLL | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/ImportTableIsBad | YRP/FASM | YRP/domain |
Source
http://94.130.104.170/Rustock.E//malware.exe
http://94.130.104.170/Rustock.E/malware.exe
Strings
		!This program cannot be run in DOS mode.
.reloc
,?g,K1
U%Y,>[
	NDK7C
~I!T\T
r^ARqn
OOON|hm
`bq}H\
o22;wy
L_EC/i
~;I+?.
c`KD6t
nTP+5"
jC76|be
Hz9+br
O?Edm]
a,-N^N
Y1N\#',
Ktz[&5
e_8wTIY
%*epjp
_Z&Pr+AO
Fa}b-t
(gTC*(
,{=;+^
3p%hde
1Z+~4\
5IC+T/
3e	7`3
gJa5$6
6~2kFKw
f)tOX;!
3I7PbSBm
(WO6]=!QdJ
>@|R!#],=eu
GG%"/S
dK3kgv
><<<Kd
? (RK#
"2zG>X#
}O_~6H_
N1Q<,]ZiH
CF{"<z
N~Cm%y
2ZG'A<
Ag!2'U
ke'R/m
2kgGWSTn
ztyhQI
gkFAr.
 oFc,*<
f\:d3!A
?z\zzC
FFR07@
="y7Kq
#n%-2X
GI+dE<"
ZA>QHE
\{V4]0
oJ]Ud@A
}vQ.ycL\z
|4![yvF
[<#*{M
{$F^r*J
>^{&L,-
4)GAEB
|">hDA
Y	rFWF
iq`~8|B
UzR'*y
JS7,4v&@
f}OHJ4
m71m>Pn
0(8=RM
*P	CP5r
(RIsMQ
)5si*N
\vD&X$
1m?^{v
Q]gUj_
-ID!A=rm
>[x!?t9
;-uUw]
Br7`}@p
&}av#:
m;J6x6
"7a!S:T&
riv6U2
T*6yCTM
9?i$Di
gIU	y8
F=Omw3
ShJc)F
@\)"d=
;tfE/-
}[T9q\
qsq:s$
|g[i99
R_{"*6
y~D,o;
qY8*x'
0.Spw/`$
~L3]0S
7ZQOuN
ZV.fxb
Qu'*_,
b &>wYb;gF
RFv:f:
.8BOyJ
.|jPr]/
@Zu)za
<`	~;!H
(3Vk\a""
J>-"5S
BG~*KN
B<CJmU
sTO0pq
'8)*yig
Fl<.T\u
Yj}W7o
(H;!t&
7VwR5m
JbK0^XB
B9W4Z+Mp
~]H830
=r.XMF
%@Z}B8
E>oRiW
	u,a2)
}_,O"T
eOwT+qb
4sCxCt
Y>/+@A
$5l[j]
	9qv's/
KyxvKO
xwj`^]
	x;'1yW
yMgV1e
UfY6Kn
zH#%l>
XmDX;;0
X^[q4*
G5qzaw
24M"vU*
l/!5H<
4b1	D'@
Yp,2q*v
-d6fyqS
G-)1e1
&I?wFU
N=zT!-
?lT,&VG
7ad:~n
=xJ9-Y
>.|wsD|
KY.r=Xd
&LM?:bj\
I!&x;"
nT.C%Om[
rF.n*4)
I	yd^o
>:Kxti
\e%6WR
5^8P}]
Kdt"7%
G}+K<x"Kt
H},l:f{
5"K n6q
xd)2OU
No&Hx]/
h1~'qR
vmQrZG
YG`AP)
hQb}r+
NRO-Z6z
6QCJuh
`kl2V$
6Mf}{!
I5}K0w
3}G3	a2
	+	8r1
D]\O6)8
*t2HTk
C:[u!k
{T$M0L\
bAnTx+
Ub1"^}
-#}$n!
G.!4s]
ZO7A( 
MZ/-%G
z~T[j`Aqy
JrP<.o
$8C6$>z
}IGM.H4
4eRSEq
2}.\V6
j}	;d)
%sYZ>(h:
[=}/t;+
A?\FH.
a,2qjX
oiigA$0
":;Fekv\]k
4Occg<U
3FG}WE
kQ)cp)
9	_	}0U
Gm{(X~x+@
4.3wU5
(pD^tlM/
O4koh*
8_$$)xD
uvCh&?
>v+pBU
7 b(E-
;f?O;Q
Um/5@#&
VGr:'b
=rnGY{
;_s0NzZ)6
jpmkDM
!j1e9>?
v^qm`bphcJ
u9$SWoW
W${i|!b
oXVe9E
A9:`H-*
">7mP%
7[F*ifD
A8rXY8
\lhc	a
E,t[2E
'bK <c
oKv}zU
!7vmEGuF3
*t.'8J
XPA;5=0
?q8EmWm[
Q2"5 -
L9d8BF
:tGpBc
;)wbm	
a9h6hT
Wo AS%
G2abz3
Nf#S	S
-+]ImZ
6c%j/d
jpOOio
tc UK{'
[@BnUxV
foPzD+
`T+Ki=
$]lX>"
P9,Sq@
J?FB>d
&$f+mP
nClbpL
Jj=(R>
{	0K7[
JcW;#^
Rn~n?Z
1Jp94^
f$O5/1"S
YV9Wgo
3(6 7e/i
jVB}%A
qh/c&	
}*GHm"3I?C
.B~?<(
p 8PF-'I
I<&?aF
f#a6A/