a7542d6a6a383d9616012af22ac666289d22b33140cf5562cbb0ead708d22aa2

Sharing

Copy URL

Twitter E-mail

General

Target

a7542d6a6a383d9616012af22ac666289d22b33140cf5562cbb0ead708d22aa2
Size

429KB
MD5

81aa05f71a6d886187faedc60e252bba
SHA1

2be2a27423b27fdc1fabcb2a9348b7eb1451313b
SHA256

a7542d6a6a383d9616012af22ac666289d22b33140cf5562cbb0ead708d22aa2
SHA512

bec210b49c6c20ff6c122bbf9c3113e6e62a7045322437ef3af28e5472838c3a9265da3e103eefe4c8d590079f431b3446358dd77b1f2cdb0042103d25b85360
SSDEEP

6144:yQ+5Zb786m6EotzH16ItKkDF01bYhwXXpGCiW2O:j+5Zb78GEotzH16ItRDktGfWt

Score

N/A

Malware Config

Signatures

Files

a7542d6a6a383d9616012af22ac666289d22b33140cf5562cbb0ead708d22aa2
.exe windows x86

1d5f9ff266affba51c568c4b4d0d418d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaStrI2
__vbaR8ForNextCheck
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaLateIdCall
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
rtcAnsiValueBstr
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaNameFile
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
rtcRandomNext
__vbaExitProc
rtcRandomize
rtcMsgBox
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
rtcDoEvents
__vbaBoolVarNull
_CIsin
rtcMidCharBstr
__vbaErase
rtcMidCharVar
__vbaChkstk
rtcSpaceVar
__vbaFileClose
EVENT_SINK_AddRef
rtcKillFiles
__vbaStrCmp
__vbaGet3
__vbaPutOwner3
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
__vbaStrR4
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaStrR8
__vbaRedim
EVENT_SINK_Release
rtcShell
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
rtcSplit
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
rtcMakeDir
__vbaFPException
rtcStrConvVar2
__vbaStrVarVal
__vbaGetOwner3
__vbaUbound
rtcBstrFromAnsi
VarPtr
_CIlog
__vbaErrorOverflow
__vbaFileOpen
rtcFreeFile
__vbaNew2
rtcFileLength
__vbaVar2Vec
_adj_fdiv_m32i
rtcHexBstrFromVar
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
rtcFileLen
rtcErrObj
ThunRTMain
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaFpI4
_CIatan
__vbaUI1Str
__vbaStrMove
__vbaAryCopy
__vbaR8IntI4
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
rtcR8ValFromBstr

Sections

.ebr
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hgfthhh
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE

ipluyy
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

uydtt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bsertttt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gdsss
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xds
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1d5f9ff266affba51c568c4b4d0d418d

Headers

File Characteristics

Imports

msvbvm60

Sections

.ebr Size: 392KB - Virtual size: 392KB

hgfthhh Size: 8KB - Virtual size: 8KB

ipluyy Size: 4KB - Virtual size: 4KB

uydtt Size: 8KB - Virtual size: 8KB

bsertttt Size: 4KB - Virtual size: 4KB

gdsss Size: 4KB - Virtual size: 8KB

.xds Size: 4KB - Virtual size: 4KB

.ebr
Size: 392KB - Virtual size: 392KB

hgfthhh
Size: 8KB - Virtual size: 8KB

ipluyy
Size: 4KB - Virtual size: 4KB

uydtt
Size: 8KB - Virtual size: 8KB

bsertttt
Size: 4KB - Virtual size: 4KB

gdsss
Size: 4KB - Virtual size: 8KB

.xds
Size: 4KB - Virtual size: 4KB