5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060

Sharing

Copy URL Twitter E-mail

General

Target
5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060
Size 792KB
Sample220724-scmx9sgad2
SHA256 5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060
MD5 78fc264c7fbfa9e180800fb3b6095768
SHA1 29d125099a78c3b3ef4d124c037aa93279440e19
SHA512 8498574f49f9c4eb9216daa89273557953fcb2573d40f8953c4495166d1aab9652107807f1b895bf6cde6677a3062c88945d230b53144c46f21ce97bb9dd34a9
SSDEEP 12288:ghTwHQjcUjvA9HpScGDtsXOO8pC1sm3kyM9v:XHscOA3GDtsXOO8pRH9v
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060

.exe 792KB

5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060

IMPHASH 743578e1e4fad6481ab7577efc74cc04
SHA256 5928e97ae3b889959f0e24b4566f61e9c5f87935526528cf6d534687dd241060
MD5 78fc264c7fbfa9e180800fb3b6095768
SHA1 29d125099a78c3b3ef4d124c037aa93279440e19
SHA512 8498574f49f9c4eb9216daa89273557953fcb2573d40f8953c4495166d1aab9652107807f1b895bf6cde6677a3062c88945d230b53144c46f21ce97bb9dd34a9
SSDEEP 12288:ghTwHQjcUjvA9HpScGDtsXOO8pC1sm3kyM9v:XHscOA3GDtsXOO8pRH9v
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

110504

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

olepro32

OleTranslateColor

gdi32

SelectObject CreatePen DeleteDC DeleteObject

oleaut32

SysAllocStringLen SysAllocStringByteLen SysStringLen

user32

LoadStringW GetDC GetParent

kernel32

GetProcAddress VirtualAlloc VirtualProtect RtlMoveMemory WideCharToMultiByte GetModuleHandleW

msvbvm60

__vbaVarTstGt __vbaVarSub ord582 __vbaR8ForNextCheck _CIcos _adj_fptan __vbaVarMove ord585 __vbaFreeVar __vbaAryMove ord588 __vbaStrVarMove __vbaLenBstr __vbaVarIdiv __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 __vbaCopyBytes __vbaStrCat ord660 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt ord591 ord593 __vbaVarPow __vbaI4Abs __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaBoolVar __vbaFPFix __vbaBoolVarNull __vbaFpR8 _CIsin ord632 __vbaVarCmpGt __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar __vbaI2I4 DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord716 __vbaFPException ord319 __vbaStrVarVal __vbaUbound __vbaCheckType __vbaI2Var __vbaStopExe _CIlog __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaLateMemCall __vbaVarAdd __vbaAryLock ord320 __vbaStrToAnsi __vbaVarDup ord321 ord614 __vbaFpI2 __vbaVarCopy __vbaVarLateMemCallLd __vbaFpI4 __vbaLateMemCallLd ord617 _CIatan __vbaCastObj __vbaStrMove ord619 _allmul _CItan __vbaFPInt __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr