bc30bc9a110c80d46e9ffd856250c03c53bcee32478e9b2286c25230c4147cbe

Sharing

Copy URL Twitter E-mail

General

Target

bc30bc9a110c80d46e9ffd856250c03c53bcee32478e9b2286c25230c4147cbe
Size

896KB
MD5

4e6e8be725e2505877dcbe59d1d63a03
SHA1

f790e9dbe40c6fd4543ec956aaa08eef7112fd33
SHA256

bc30bc9a110c80d46e9ffd856250c03c53bcee32478e9b2286c25230c4147cbe
SHA512

f50f17c030215fc73a227f6f487305985436bef465bf254ea6fe96bcd60be151a22aa4fb0fd876757ed8cb88605553a941fdb37d79e98079673dc934cd01f252
SSDEEP

6144:RGYreIxTTDH8T8UTJ2lTGnI84b4PWT95USmIBmRVDdj0+amD8ZXBLB/fxp95M8Zy:MWjronX4MPWT9hmMchdm1f395zZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc30bc9a110c80d46e9ffd856250c03c53bcee32478e9b2286c25230c4147cbe

Files

bc30bc9a110c80d46e9ffd856250c03c53bcee32478e9b2286c25230c4147cbe
.exe windows:1 windows x86 arch:x86

d02f98cae2f46f0e241c70d5a1e78ff4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c4ascx

ASCII

c4runx

Cla$ACCEPTED
Cla$ADDqueue
Cla$ADDqueuekey
Cla$ADDqueueptr
Cla$BEEP
Cla$BindG
Cla$BindV
Cla$BLANK
Cla$CHANGE
Cla$CHOICE
Cla$CLEAR
Cla$clearstr
Cla$ClearType
Cla$CLOCK
Cla$CLOSEwindow
Cla$code
Cla$COLORDIALOG
Cla$COMMIT
Cla$comparestr
Cla$CREATE
Cla$DATE
Cla$DAY
Cla$DDEclient
Cla$DDEread
Cla$DecAdd
Cla$DecCompareN
Cla$DecDistinct
Cla$DecDistinctR
Cla$DecDivide
Cla$DecDivideR
Cla$DecMul
Cla$DecSub
Cla$DecSubR
Cla$DELETEqueue
Cla$DESTROY
Cla$DInt
Cla$DISABLE
Cla$DISPLAY
Cla$DISPOSEqueue
Cla$DPopDec
Cla$DPopLong
Cla$DPopReal
Cla$DPushDec
Cla$DPushLong
Cla$DPushULong
Cla$DStack2Stack
Cla$duplicate
Cla$ENABLE
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ENDPAGE
Cla$ERRCODE
Cla$EVENT
Cla$FIELD
Cla$FILEDIALOG
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FILE_ADDf
Cla$FILE_APPENDf
Cla$FILE_BUILDf
Cla$FILE_CLEAR
Cla$FILE_CLOSE
Cla$FILE_CREATE
Cla$FILE_DELETE
Cla$FILE_DUPLICATEk
Cla$FILE_FLUSH
Cla$FILE_GETfk
Cla$FILE_GETfl
Cla$FILE_GET_PROPERTY
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_PACK
Cla$FILE_POSITIONf
Cla$FILE_POSITIONk
Cla$FILE_PREV
Cla$FILE_PUTf
Cla$FILE_RECORDSf
Cla$FILE_RECORDSk
Cla$FILE_REGETf
Cla$FILE_REGETk
Cla$FILE_REMOVE
Cla$FILE_RESETf
Cla$FILE_RESETk
Cla$FILE_SEND
Cla$FILE_SETf
Cla$FILE_SETk
Cla$FILE_SETkk
Cla$FILE_SET_PROPERTY
Cla$FILE_STREAM
Cla$FILE_WATCH
Cla$FIRSTFIELD
Cla$FOCUS
Cla$FREEqueue
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GETPOSITION
Cla$GetPropS
Cla$GETqueuekey
Cla$GETqueueptr
Cla$Group2Ufo
Cla$HALT
Cla$HELP
Cla$HIDE
Cla$INCOMPLETE
Cla$init
Cla$IsAlpha
Cla$IsUpper
Cla$KEYCHAR
Cla$KEYCODE
Cla$KEYSTATE
Cla$KEY_GET_PROPERTY
Cla$LASTFIELD
Cla$LFNDIRECTORY
Cla$LINE
Cla$loaddec
Cla$loadstr
Cla$Locale
Cla$LOGOUT
Cla$Mem2Ufo
Cla$MessageBox
Cla$modulus
Cla$MONTH
Cla$NEWqueue
Cla$OPENwindow
Cla$pmopen
Cla$PopBind
Cla$PopCString
Cla$PopReal
Cla$PopString
Cla$PopTemp
Cla$POPUP
Cla$POST
Cla$PRESSKEY
Cla$PRINTERDIALOG
Cla$PRINTreport
Cla$propen
Cla$PushBind2
Cla$PushCString
Cla$PushLong
Cla$PushPictDec
Cla$PushPictLong
Cla$PushReal
Cla$PushString
Cla$PUTINI
Cla$PUTqueue
Cla$pwopen
Cla$RANDOM
Cla$RECORDSqueue
Cla$REJECTCODE
Cla$RemoveFile
Cla$ROLLBACK
Cla$RUN
Cla$SELECT
Cla$SETCURSOR
Cla$SETKEYCODE
Cla$SETPATH
Cla$SETPENSTYLE
Cla$SETPOSITION
Cla$SetPropF
Cla$SetPropQ
Cla$SetPropS
Cla$SetPropV
Cla$SETTARGET
Cla$SHORTPATH
Cla$SHOW
Cla$SORTqueuekey
Cla$Stack2DStack
Cla$StackALL
Cla$StackCLIP
Cla$StackCompare
Cla$StackCompareN
Cla$StackCompareR
Cla$StackConcat
Cla$StackConcatR
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLen
Cla$StackLOWER
Cla$STACKpop
Cla$StackPRESS
Cla$StackRotate
Cla$StackSUB
Cla$StackUPPER
Cla$StartEventLoop
Cla$STOP
Cla$storecstr
Cla$storestr
Cla$TODAY
Cla$UNHIDE
Cla$UPDATE
Cla$YEAR
VIEWDRIVER
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_mkdir
_setjmp
__checkversion
__sysinit

c4tpsx

TOPSPEED

cw4fm232

ds_AddDriver
ds_AppName
ds_IgnoreDriver
ds_MakeTPE
ds_UpGradeFile
ds_UsingFile

kernel32

GetVolumeInformationA
RemoveDirectoryA

shell32

ShellExecuteA

winmm

mciSendStringA

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d02f98cae2f46f0e241c70d5a1e78ff4

Headers

File Characteristics

Imports

c4ascx

c4runx

c4tpsx

cw4fm232

kernel32

shell32

winmm

Sections

.text Size: 177KB - Virtual size: 176KB

.bss Size: 83KB - Virtual size: 82KB

.data Size: 32KB - Virtual size: 31KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 657KB - Virtual size: 656KB

.reloc Size: 23KB - Virtual size: 22KB

.text
Size: 177KB - Virtual size: 176KB

.bss
Size: 83KB - Virtual size: 82KB

.data
Size: 32KB - Virtual size: 31KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 657KB - Virtual size: 656KB

.reloc
Size: 23KB - Virtual size: 22KB