b31fdfb032644bcb1f8b072f4dc5e11a[.]exe

General

Target
b31fdfb032644bcb1f8b072f4dc5e11a.exe
Size 197KB
Sample220120-s23d9aaed8
SHA256 4ef528f41c74b287a3bc8bcb4cf1cde16d54b0fbdffe11e845e5aa2b656dc961
MD5 b31fdfb032644bcb1f8b072f4dc5e11a
SHA1 1f4213eeaf0990d62b6c46ea8f29026c1555bc1a
SHA512 653a701f4ed1cecd6081e800ec50300a11ac1b927b32192deef796176e655f287bf5024279f0e2821ab5ee62cbc6ac24155b12a9be637dd1c199209289f05087
SSDEEP 1536:HhsFidcwgFEDQN9aF5kqTwn5wwBq1hYKkoCQl0kzuKnIKSEHQFo/dWP342:2Fccwgt9tyw57kMKN/2kZnr/3/Oo2
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

b31fdfb032644bcb1f8b072f4dc5e11a.exe

.exe 197KB

b31fdfb032644bcb1f8b072f4dc5e11a.exe

IMPHASH 49b15580bd181e45d4d97bbfb270c139
SHA256 4ef528f41c74b287a3bc8bcb4cf1cde16d54b0fbdffe11e845e5aa2b656dc961
MD5 b31fdfb032644bcb1f8b072f4dc5e11a
SHA1 1f4213eeaf0990d62b6c46ea8f29026c1555bc1a
SHA512 653a701f4ed1cecd6081e800ec50300a11ac1b927b32192deef796176e655f287bf5024279f0e2821ab5ee62cbc6ac24155b12a9be637dd1c199209289f05087
SSDEEP 1536:HhsFidcwgFEDQN9aF5kqTwn5wwBq1hYKkoCQl0kzuKnIKSEHQFo/dWP342:2Fccwgt9tyw57kMKN/2kZnr/3/Oo2
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

4f:a2:03:a0:17:5a:a5:fe:f8:95:54:c7:bf:2c:80:ad:80:27:cb:05:e1:4a:e2:9e:3a:df:e2:bc:35:04:d0:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

6148

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaR8FixI4 __vbaVarTstGt ord583 ord690 _CIcos _adj_fptan ord692 __vbaStrI4 __vbaFreeVar ord587 __vbaAryMove __vbaStrVarMove ord588 __vbaLenBstr ord696 ord697 __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 ord698 ord513 ord514 ord515 ord517 _adj_fprem1 ord518 ord629 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord557 _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaOnError __vbaObjSet _adj_fdiv_m16i ord702 __vbaObjSetAddref _adj_fdivr_m16i ord598 ord703 ord704 ord520 ord705 ord521 ord522 ord523 __vbaFpR8 _CIsin ord631 ord524 ord525 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaLbound _adj_fpatan __vbaRedim __vbaStrR8 EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord712 ord606 ord713 _adj_fprem _adj_fdivr_m64 ord714 ord607 ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat ord537 _CIlog __vbaErrorOverflow ord539 __vbaFileOpen __vbaNew2 ord648 __vbaVar2Vec _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord573 __vbaFreeStrList ord575 _adj_fdivr_m32 _adj_fdiv_r ord578 ord685 ord100 __vbaI4Var ord610 ord611 __vbaInStrB ord612 __vbaVarDup ord613 ord614 __vbaVarTstGe ord616 __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaStrMove ord619 ord541 _allmul __vbaLenVarB ord651 _CItan __vbaFPInt _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing