658e9bb265b98a5abbd17bbfb1c9a5c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

658e9bb265b98a5abbd17bbfb1c9a5c0N.exe
Size

566KB
MD5

658e9bb265b98a5abbd17bbfb1c9a5c0
SHA1

d6a26af64511407cc2f41f8df7df1aec611ca481
SHA256

5dd18c59d9a3d621a3791eb25efab7105bcda9c0a07f1435ffba39de7337a5e9
SHA512

27a36b5c45833985284db939baa028f4edf06720d706c11ca728c898167a0c00d22764a831faf011b482bc6a34824be56e78822a130453ab719e6cdac1d05571
SSDEEP

6144:27cmExv/Gie8Il3s1Mj/nu+IonmxSZVo8j2baFwLklH9wB5Ag5/R/LETDmM7IIUI:ocdpJIl3s1AQonmMzdqeztKTAq74f19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
658e9bb265b98a5abbd17bbfb1c9a5c0N.exe

Files

658e9bb265b98a5abbd17bbfb1c9a5c0N.exe
.exe windows:1 windows x86 arch:x86

779e7c5a609f0a79dbfe1699c765516f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

c60ascx

ASCII

c60odbx

ODBC

c60runx

Cla$ACCEPTED
Cla$BEEP
Cla$BindG
Cla$BindV
Cla$CLEAR
Cla$clearstr
Cla$CLOCK
Cla$CLOSEwindow
Cla$code
Cla$COMMAND
Cla$comparestr
Cla$DISABLE
Cla$DISPLAY
Cla$DPopDec
Cla$DPopLong
Cla$DPushDec
Cla$DPushLong
Cla$duplicate
Cla$EndEventLoop
Cla$EndEventLoops
Cla$ERRORCODE
Cla$EVENT
Cla$FIELD
Cla$FILEERRORCODE
Cla$FILEERRORMSG
Cla$FILE_ADDf
Cla$FILE_APPENDf
Cla$FILE_BUILDf
Cla$FILE_CLOSE
Cla$FILE_CREATE
CLA$FILE_DESTROY
Cla$FILE_EMPTY
Cla$FILE_FLUSH
Cla$FILE_GETfk
Cla$FILE_NAME
Cla$FILE_NEXT
Cla$FILE_OPEN
Cla$FILE_PUTf
Cla$FILE_RECORDSf
Cla$FILE_SEND
Cla$FILE_SETf
Cla$FILE_SETkk
Cla$FILE_SET_PROPERTY
Cla$FREEqueue
Cla$freestr
Cla$FreeUfo
Cla$freewindow
Cla$GETINI
Cla$GetPropS
Cla$Group2Ufo
Cla$HALT
Cla$init
Cla$KEYCODE
Cla$Mem2Ufo
Cla$MessageBox
Cla$OPENwindow
Cla$paopen
Cla$PopBind
Cla$PopCString
Cla$PopString
Cla$PopTemp
Cla$POST
Cla$PushBind
Cla$PushCString
Cla$PushLong
Cla$PushPictDec
Cla$PushPictLong
Cla$PushString
Cla$pwopen
Cla$rterr
Cla$SELECT
Cla$SETKEYCODE
Cla$SetPropS
Cla$Stack2DStack
Cla$StackCLIP
Cla$StackCompareN
Cla$StackCompareNEQ
Cla$StackConcat
Cla$StackConcatR
Cla$StackDEFORMAT
Cla$StackErrstr
Cla$StackHeap
Cla$StackINSTRING
Cla$StackLEFT
Cla$StackLen
Cla$StackLOWER
Cla$STACKpop
Cla$StackRotate
Cla$StackSUB
Cla$StartEventLoop
Cla$storebtdate
Cla$storebttime
Cla$storecstr
Cla$storestr
Cla$THREAD
Cla$THREAD_FILE
Cla$TODAY
Cla$YIELD
THR$GetInstance
Wsl$CloseDown
_exit
_free
_longjmp
_malloc
_setjmp
__sysinit
__sysstart

c60tpsx

TOPSPEED

kernel32

SleepEx

user32

SystemParametersInfoA

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cwtls
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cwdebug
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

779e7c5a609f0a79dbfe1699c765516f

Headers

File Characteristics

Imports

c60ascx

c60odbx

c60runx

c60tpsx

kernel32

user32

Sections

.text Size: 122KB - Virtual size: 121KB

.data Size: 57KB - Virtual size: 159KB

.cwtls Size: 4KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 18KB - Virtual size: 18KB

.cwdebug Size: 512B - Virtual size: 28B

.text
Size: 122KB - Virtual size: 121KB

.data
Size: 57KB - Virtual size: 159KB

.cwtls
Size: 4KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 18KB - Virtual size: 18KB

.cwdebug
Size: 512B - Virtual size: 28B