Upon execution, SdBot.CKF will create a copy of itself in the following location:

It creates the following registry entry to automatically start with Windows:

Once the backdoor is active, it connects to an IRC server, joins a certain channel and acts as a bot.
The backdoor will try to contact the following IRC server:

Then it joins the following channels:

The malware attempts to download from the following locations:

The files are detected as follows:

Here are more commands used by the bot:

Furthermore, another sign of infection from this malware is an outbound connection to http.xn--mg-kka.com.