2b2ba00e577e1fd686c948b53138fe4972c7bcca952e9280ae59c07e12e47922

Sharing

Copy URL

Twitter E-mail

General

Target

2b2ba00e577e1fd686c948b53138fe4972c7bcca952e9280ae59c07e12e47922
Size

644KB
MD5

6a66652cfca53444e05ffba34572cd19
SHA1

ee37adc7c2931034366f66398ea833e8acf3e3f5
SHA256

2b2ba00e577e1fd686c948b53138fe4972c7bcca952e9280ae59c07e12e47922
SHA512

a3bab4d6693e56d54f8937e08b679866752731157be536fcbf6b46b9fce25078777863d77b465c92284d4722e8ef83749dd319f7cfebbeb90291e36ae16c3f72
SSDEEP

12288:xvLgwyKjXsW2DiVUeNZWaREoku6HmiDTfU:JgC7ZBV7n5kucTA

Score

N/A

Malware Config

Signatures

Files

2b2ba00e577e1fd686c948b53138fe4972c7bcca952e9280ae59c07e12e47922
.exe windows x86

8f00080a2b025d91ea34ce2d61ffca46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaNextEachVar
__vbaGetFxStr3
rtcAnsiValueBstr
_adj_fprem1
__vbaRecAnsiToUni
__vbaCopyBytes
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
rtcRandomNext
__vbaVarForInit
__vbaObjSet
rtcMsgBox
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
rtcDoEvents
__vbaCyStr
_CIsin
rtcMidCharBstr
__vbaErase
rtcSpaceBstr
rtcMidCharVar
__vbaVarZero
__vbaChkstk
__vbaFileClose
rtcSpaceVar
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaGet3
__vbaStrCmp
__vbaAryConstruct2
DllFunctionCall
__vbaLbound
_adj_fpatan
__vbaFixstrConstruct
__vbaRedim
__vbaRecUniToAnsi
__vbaUI1ErrVar
EVENT_SINK_Release
rtcArray
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
rtcSplit
__vbaStrToUnicode
rtcStrReverse
_adj_fprem
_adj_fdivr_m64
rtcStringVar
__vbaI2Str
rtcVarBstrFromAnsi
__vbaFPException
rtcStrConvVar2
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaLsetFixstrFree
__vbaI2Var
rtcBstrFromAnsi
__vbaFileSeek
VarPtr
_CIlog
__vbaFileOpen
__vbaNew2
rtcFileLength
__vbaR8Str
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
rtcImmediateIf
__vbaI4Str
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ThunRTMain
__vbaVarTstNe
__vbaI4Var
__vbaAryLock
__vbaVarAdd
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaVarMod
rtcLeftCharBstr
__vbaFpI4
__vbaVarCopy
_CIatan
__vbaCastObj
__vbaStrMove
__vbaAryCopy
__vbaForEachVar
_allmul
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
rtcR8ValFromBstr

Sections

.text
Size: 632KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f00080a2b025d91ea34ce2d61ffca46

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 632KB - Virtual size: 652KB

.rsrc Size: 4KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.text
Size: 632KB - Virtual size: 652KB

.rsrc
Size: 4KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB