3dc31f42f0469303f4650e888787c1465bd79f68b3351fe222660a58f72724d2

Sharing

Copy URL Twitter E-mail

General

Target

3dc31f42f0469303f4650e888787c1465bd79f68b3351fe222660a58f72724d2
Size

272KB
MD5

5b0451a6d682f09af246e9ae58a70d60
SHA1

ecdbbdec40ae9cea6e9500bc31b88926b1815d11
SHA256

3dc31f42f0469303f4650e888787c1465bd79f68b3351fe222660a58f72724d2
SHA512

855ec406406080297e73657f19d90813de4e21b5923504616aaafe708f5085ba162e91e5d77021afc2f1dcc0ff708a94126543c6b4284739fbfe3590b7bc42ca
SSDEEP

6144:vtW3r7AxrqRpdKSk2xJjTGH0QwyqRRLnfbT4810heMl:6RY

Score

N/A

Malware Config

Signatures

Files

3dc31f42f0469303f4650e888787c1465bd79f68b3351fe222660a58f72724d2
.exe windows x86

dbb5a4d7088a2e9cd0329171a0346974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
ord582
ord583
ord584
_CIcos
_adj_fptan
__vbaVarMove
ord585
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarTstLe
__vbaVarCmpGe
__vbaCyErrVar
__vbaVarPow
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVarNull
__vbaVarTstLt
_CIsin
__vbaVarCmpGt
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaVarCmpLe
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaNew2
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
ord100
__vbaVarAdd
ord614
__vbaVarCopy
__vbaVarTstGe
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaStrCy
__vbaFreeStr
__vbaFreeObj
ord581

kernel32

lstrcatA
_lread
_lopen
CreateFileA
GetLastError
ReadFile
CloseHandle
DeleteFileA
_lclose
WriteFile
_lwrite
MoveFileA
OpenFile
SetFilePointer
GetLocalTime
_lcreat
GetTickCount
lstrcmpiA
GetModuleHandleA
GetSystemTime
lstrcpyA
_llseek
GetModuleFileNameA
GetEnvironmentVariableA
CreateThread
TerminateThread
SetEvent
WaitForSingleObject
CreateEventA
ExitProcess
Sleep
LoadLibraryA
FreeLibrary
GetProcAddress
GetVersion
lstrlenA
GlobalFree
DeviceIoControl
GetVersionExA
GlobalAlloc

user32

MessageBoxA

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gtide
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gidata
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dbb5a4d7088a2e9cd0329171a0346974

Headers

File Characteristics

Imports

msvbvm60

kernel32

user32

Sections

.text Size: 192KB - Virtual size: 189KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 2KB

.gtide Size: 56KB - Virtual size: 55KB

.gdata Size: 8KB - Virtual size: 7KB

.gidata Size: 4KB - Virtual size: 40KB

.text
Size: 192KB - Virtual size: 189KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 2KB

.gtide
Size: 56KB - Virtual size: 55KB

.gdata
Size: 8KB - Virtual size: 7KB

.gidata
Size: 4KB - Virtual size: 40KB