c94aadb00f36b0717a55abc602b4a5af0eafbf0ae36feb697da8f18c98cffacb

Sharing

Copy URL Twitter E-mail

General

Target

c94aadb00f36b0717a55abc602b4a5af0eafbf0ae36feb697da8f18c98cffacb
Size

250KB
MD5

8c18ffb302b473663e4660e9f9f442d2
SHA1

f545305330c5c2dbc3f4c38a4a995789e4493ed9
SHA256

c94aadb00f36b0717a55abc602b4a5af0eafbf0ae36feb697da8f18c98cffacb
SHA512

7454ae9a672e3b4ad54110d9bac320e9186eb094c439b4b33ad1f9c7bd6035b1e2d5418ace0ea0a7047219167b70640c8ba05b2df28a3f19d8593d440b6060e3
SSDEEP

3072:tFhtgY0kGvUkjIjHZUMwfVTqYNeiqcKdqtf+/y1QjjSG+d3P4D/AC2cV2GqaULhc:z5GvVIIVTJoiqcKdQ+/jjSG+d3DcVjOc

Score

N/A

Malware Config

Signatures

Files

c94aadb00f36b0717a55abc602b4a5af0eafbf0ae36feb697da8f18c98cffacb
.exe windows x86

1473e65bb2efbe9d26f15ca9e3f14c4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c70asc

ASCII

c70run

Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueuekey
Cla$ADDqueueptr
Cla$AddressUfo
Cla$AssertFailed
Cla$AssertFailedM
Cla$AssignLong2RefUfo
Cla$AssignReal2RefUfo
Cla$AssignRefUfo
Cla$BEEP
Cla$BindG
Cla$CHOICE
Cla$CLEAR
Cla$CLEARqueue
Cla$clearstr
Cla$ClearType
Cla$ClearUfo
Cla$CLOCK
Cla$CloneUfo
Cla$CLOSEwindow
Cla$code
Cla$COMMIT
Cla$comparestr
Cla$CREATE
Cla$DEBUGHOOK
Cla$DecAdd
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DecMul
Cla$DecSub
Cla$DecSubR
Cla$DELETEqueue
Cla$DELETEREG
Cla$DESTROY
Cla$DISABLE
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$DISPOSEref
Cla$DISPOSEvref
Cla$Dlongpower
Cla$DPopDec
Cla$DPopLong
Cla$DPopReal
Cla$DPushDec
Cla$DPushLong
Cla$DRound
Cla$DStack2Stack
Cla$ENABLE
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRORCODE
Cla$Evaluate
Cla$EVENT
Cla$FIELD
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FileExists
Cla$FILE_ADDf
Cla$FILE_BUFFER
Cla$FILE_BUILDf
CLA$FILE_CALLBACK
Cla$FILE_CLEAR
Cla$FILE_CLOSE
Cla$FILE_CREATE
Cla$FILE_DELETE
CLA$FILE_DESTROY
Cla$FILE_DUPLICATEk
Cla$FILE_FLUSH
CLA$FILE_FREESTATE
Cla$FILE_GETfk
Cla$FILE_GETfl
Cla$FILE_GETNULLS
CLA$FILE_GETSTATE
Cla$FILE_GET_PROPERTY
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_NOMEMO
Cla$FILE_OPEN
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_PREV
Cla$FILE_PUTf
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_RESETf
Cla$FILE_RESETk
CLA$FILE_RESTORESTATE
Cla$FILE_SEND
Cla$FILE_SETk
Cla$FILE_SETkk
Cla$FILE_SETNULLS
Cla$FILE_SET_PROPERTY
Cla$FILE_WATCH
Cla$FOCUS
Cla$FREEqueue
Cla$FREEqueuea
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GETPOSITION
Cla$GetPropS
Cla$GETqueuekey
Cla$GETqueueptr
Cla$GETREG
Cla$Group2Ufo
Cla$HALT
Cla$HIDE
Cla$init
Cla$INSTANCE
Cla$IsAlpha
Cla$IsUfoString
Cla$IsUpper
Cla$KEYCHAR
Cla$KEYCODE
Cla$KEY_GET_PROPERTY
Cla$LASTFIELD
Cla$LOGOUT
Cla$longtostr
Cla$Mem2Ufo
Cla$MessageBox
Cla$NewMemB
Cla$NewMemT
Cla$NewMemZ
Cla$NEWqueue
Cla$NOTIFICATION
Cla$OPENowned
Cla$OPENwindow
Cla$paopen
Cla$pmopen
Cla$POINTERqueue
Cla$PopAString
Cla$PopBind
Cla$PopCString
Cla$PopReal
Cla$PopString
Cla$PopTemp
Cla$POPUP
Cla$POST
Cla$PRESSKEY
Cla$PushAString
Cla$PushBind
Cla$PushCString
Cla$PushLong
Cla$PushPictLong
Cla$PushString
Cla$PushUfo
Cla$PUTINI
Cla$PUTqueue
Cla$PUTqueuekey
Cla$PUTREG
Cla$pwopen
Cla$RECORDSqueue
Cla$RefAssignAny
Cla$REGISTEREVENT
Cla$REGULAR
Cla$ROLLBACK
Cla$rterr
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SETPOSITION
Cla$SetPropF
Cla$SetPropS
Cla$SetPropV
Cla$SETTARGET
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$Stack2Ufo
Cla$StackCLIP
Cla$StackCompareN
Cla$StackCompareNEQ
Cla$StackCompareR
Cla$StackConcat
Cla$StackConcatR
Cla$StackDEFORMAT2
Cla$StackErrstr
Cla$StackHeap
Cla$StackINLIST
Cla$StackINSTRING
Cla$StackLEFT
Cla$StackLen
Cla$StackNUMERIC
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$START
Cla$START2
Cla$StartEventLoop
Cla$StashBP
Cla$STATUSfile
Cla$storecstr
Cla$storestr
Cla$String2Ref
Cla$THREAD
Cla$TODAY
Cla$Ufo2Real
Cla$UfoCompareN
Cla$Ufodistinct
Cla$UNHIDE
Cla$UNREGISTEREVENT
Cla$UPDATE
Cla$VIEW_RESETvf
Cla$VIEW_SETvl
Cla$WHAT
Cla$WHOqueue
NewCriticalSection
THR$GetInstance
VIEWDRIVER
Wsl$CloseDown
_exit
_free
_malloc
__a_chkstk
__e_index
__e_stack
__sysinit
__sysstart

c70tps

TOPSPEED

user32

SystemParametersInfoA

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cwdebug
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1473e65bb2efbe9d26f15ca9e3f14c4b

Headers

File Characteristics

Imports

c70asc

c70run

c70tps

user32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 32KB - Virtual size: 39KB

.cwtls Size: 512B - Virtual size: 4KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 42KB - Virtual size: 41KB

.reloc Size: 12KB - Virtual size: 12KB

.cwdebug Size: 4KB - Virtual size: 3KB

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 32KB - Virtual size: 39KB

.cwtls
Size: 512B - Virtual size: 4KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 42KB - Virtual size: 41KB

.reloc
Size: 12KB - Virtual size: 12KB

.cwdebug
Size: 4KB - Virtual size: 3KB