8d3755fdf2adf0742019cf058c83f8c7adddbc2daefd67e14554b5572eb05b3c

Reason

config extraction: GuloaderBin: guloader: invalid shellcode

General

Target

8d3755fdf2adf0742019cf058c83f8c7adddbc2daefd67e14554b5572eb05b3c
Size

240KB
MD5

0abf801b14c2e31bc4aa69076ff78a52
SHA1

57c17c2174c27ba149337f8eafffc8f09134656d
SHA256

8d3755fdf2adf0742019cf058c83f8c7adddbc2daefd67e14554b5572eb05b3c
SHA512

16acee868c4e0c81b2c1f6985d5a716665966750fb5a892ed032c6893e557b46ed9dd24b807d961d4e66783022e3be1e58dfbb035c417fce7a02bbbd000ca228
SSDEEP

6144:puF+hq+C+J1c9W4yc+88TvpDNN60dEQ2L2:pugq+1J1c9mc+1DNoa

Score

N/A

Malware Config

Signatures

Files

8d3755fdf2adf0742019cf058c83f8c7adddbc2daefd67e14554b5572eb05b3c
.exe windows x86

3ccba08b04e562307e4139942ede7b00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaCyMul
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaVarIndexStore
_adj_fprem1
__vbaStrCat
ord661
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaCyAdd
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaAryConstruct2
__vbaCyI4
__vbaI2I4
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
__vbaRedimVar
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
__vbaDateVar
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaAryLock
ord612
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
ord580
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

3ccba08b04e562307e4139942ede7b00

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 212KB - Virtual size: 211KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 212KB - Virtual size: 211KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 8KB - Virtual size: 7KB