ac012726f231d7eb7785e525819079d9d7f1d9179ce130ab3f68c05419ca68fc

Sharing

Copy URL Twitter E-mail

General

Target

ac012726f231d7eb7785e525819079d9d7f1d9179ce130ab3f68c05419ca68fc
Size

354KB
MD5

80a558f6ea2dd050cc5d84cdebeb045b
SHA1

ee4ff8a5c779ff83a98e8ca5e5f24ff8fbe33ee6
SHA256

ac012726f231d7eb7785e525819079d9d7f1d9179ce130ab3f68c05419ca68fc
SHA512

f68a751dded9598dea36c4f78ee81d266305514ef854d77011204fbc022479d8e1820c9214e022fa977ccbacad59e301f6ed2bad0dfbf650cdff91e9b25dec3d
SSDEEP

6144:OiMypUZAWd0lf4AzmXKmAT5I2a4E8of4gTfiO4gTfi:OiMyWiWd0lf4AvTRPgTKTgTK

Score

N/A

Malware Config

Signatures

Files

ac012726f231d7eb7785e525819079d9d7f1d9179ce130ab3f68c05419ca68fc
.exe windows x86

d7a408590d4f46889383e5aca518f031

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

c5ascx

ASCII

c5dosx

DOS

c5odbx

ODBC

c5runx

Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueuekey
Cla$AssignLong2RefUfo
Cla$AssignReal2RefUfo
Cla$AssignRefUfo
Cla$BEEP
Cla$BindG
Cla$CLEAR
Cla$clearstr
Cla$ClearUfo
Cla$CLOCK
Cla$code
Cla$COMMAND
Cla$COMMIT
Cla$comparestr
Cla$CopyFile
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DecMul
Cla$DecSubR
Cla$DELETEqueue
Cla$DInt
Cla$DISABLE
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$DPopLong
Cla$DPopReal
Cla$DPushLong
Cla$DPushULong
Cla$duplicate
Cla$ENABLE
Cla$EndEventLoop
Cla$ERRCODE
Cla$EVENT
Cla$FIELD
Cla$FILEDIALOG
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FileExists
Cla$FILE_ADDf
Cla$FILE_BUILDf
Cla$FILE_BYTES
Cla$FILE_CLEAR
Cla$FILE_CLOSE
Cla$FILE_CREATE
Cla$FILE_DELETE
Cla$File_Do_Property
Cla$FILE_DUPLICATEk
Cla$FILE_GETfk
Cla$FILE_GETfl
Cla$FILE_GET_PROPERTY
Cla$FILE_HOLDf
Cla$FILE_NEXT
Cla$FILE_NOMEMO
Cla$FILE_OPEN
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_PREV
Cla$FILE_PUTf
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_REMOVE
Cla$FILE_RENAME
Cla$FILE_RESETf
Cla$FILE_RESETk
Cla$FILE_SEND
Cla$FILE_SETf
Cla$FILE_SETk
Cla$FILE_SETkk
Cla$FILE_SET_PROPERTY
Cla$FILE_WATCH
Cla$FOCUS
Cla$FREEqueue
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GetPropS
Cla$GETqueuekey
Cla$GETqueueptr
Cla$Group2Ufo
Cla$HALT
Cla$HIDE
Cla$init
Cla$IsUfoString
Cla$KEYCODE
Cla$KEY_GET_PROPERTY
Cla$loadbtdate
Cla$loadbttime
Cla$loaddec
Cla$LOGOUT
Cla$Long2Ufo
Cla$Mem2Ufo
Cla$MessageBox
Cla$NewMemB
Cla$NEWqueue
Cla$OPENwindow
Cla$POINTERqueue
Cla$PopAString
Cla$PopBind
Cla$PopCString
Cla$PopReal
Cla$PopString
Cla$PopTemp
Cla$POST
Cla$PushAString
Cla$PushBind2
Cla$PushCString
Cla$PushLong
Cla$PushPictLong
Cla$PushReal
Cla$PushString
Cla$PushUfo
Cla$PUTINI
Cla$PUTqueue
Cla$pwopen
Cla$Real2Ufo
Cla$realdistinct
Cla$RECORDSqueue
Cla$RefAssignAny
Cla$RegisterSwapS
Cla$ROLLBACK
Cla$RUN
Cla$RUNCODE
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SETPATH
Cla$SetPropS
Cla$SetPropV
Cla$SHORTPATH
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$Stack2Ufo
Cla$StackCLIP
Cla$StackCompare
Cla$StackCompareN
Cla$StackCompareR
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLen
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$StartEventLoop
Cla$StashBP
Cla$storecstr
Cla$storestr
Cla$THREAD
Cla$TODAY
Cla$Ufo2Real
Cla$Ufodistinct
Cla$UNHIDE
Cla$UNREGISTEREVENT
Cla$UPDATE
Cla$WHAT
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_memset
_setjmp
__checkversion
__sysinit

kernel32

GetDiskFreeSpaceA

shell32

ShellExecuteA

winmm

sndPlaySoundA

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7a408590d4f46889383e5aca518f031

Headers

File Characteristics

Imports

advapi32

c5ascx

c5dosx

c5odbx

c5runx

kernel32

shell32

winmm

Sections

.text Size: 66KB - Virtual size: 65KB

.bss Size: - Virtual size: 9KB

.data Size: 26KB - Virtual size: 25KB

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 246KB - Virtual size: 245KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 66KB - Virtual size: 65KB

.bss
Size: - Virtual size: 9KB

.data
Size: 26KB - Virtual size: 25KB

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 246KB - Virtual size: 245KB

.reloc
Size: 9KB - Virtual size: 9KB