8040376156[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8040376156.zip
Size

3KB
MD5

ed3be05cebc1a4b339b4d827ae3e23dc
SHA1

8157ee26e271f775dfa0f5dc6a9beb2ac5b80288
SHA256

052af61c750af565afdd8995a35ab3a140c18ba43bc02c9a7f6ecefde4baac8b
SHA512

5874981f6fb905f7cd99ec0989b4bb0d4e0ce1d57a03398f20ac4c75e99ed0a30b9bf0193efe13ee84e39ae50dd124d18075f0efd83a4ce0b69fd3df5712f482

Score

N/A

Malware Config

Signatures

Files

8040376156.zip
.zip

Password: infected
5c6c4ab2911ddb6ba8571c6d01f2f8dbd2b1825d56b2754940d1cd0444ec7ece
.exe windows x86

f66883ffef1ada3eb3ddf1e69a470f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaResume
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaRefVarAry
__vbaBoolVarNull
_CIsin
ord632
__vbaChkstk
__vbaVarTstEq
DllFunctionCall
ord670
_adj_fpatan
ord600
_CIsqrt
__vbaVarAnd
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaUbound
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarCmpEq
__vbaVarDup
__vbaFpI4
ord617
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ