9465d8ab83212c0b70f3969befd9a866344c8bbf5e39c337a96a3bd53df1fe55

Sharing

Copy URL Twitter E-mail

General

Target

9465d8ab83212c0b70f3969befd9a866344c8bbf5e39c337a96a3bd53df1fe55
Size

2.1MB
MD5

b192a07df59f9a509f8998408f89927a
SHA1

c6ac05b096dedde8e0429d89dde355b48b42bc78
SHA256

9465d8ab83212c0b70f3969befd9a866344c8bbf5e39c337a96a3bd53df1fe55
SHA512

0829bf11fbe34e25b5ec78688c12b9e677ae4145459dd88b85d3dcc5ab2a6c83b65147117a8358096255f6b6e8197b3c4fdc527ff0fe5b98c012c25130d14315
SSDEEP

49152:NKjNYAIfNB+8c9vFEfBdmRZAcg9evLrnuZq02OGL:NY/IfNs1t8XmRZAcg9evLJ02OGL

Score

N/A

Malware Config

Signatures

Files

9465d8ab83212c0b70f3969befd9a866344c8bbf5e39c337a96a3bd53df1fe55
.exe windows x86

c6d44ef837dc69f5d061afd03cc89e64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaChkstk
__vbaExceptHandler
__vbaFPException
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
_allmul
DllFunctionCall
__vbaErrorOverflow
rtcLeftCharVar
rtcTrimVar
__vbaStrVarMove
__vbaFreeVarList
__vbaInStrVar
__vbaI4Var
__vbaFreeVar
rtcVarBstrFromAnsi
rtcStringBstr
__vbaStrMove
__vbaFreeStr
__vbaFreeStrList
__vbaStrToUnicode
__vbaSetSystemError
__vbaStrToAnsi
__vbaStrCmp
__vbaStrCopy
__vbaExitProc
__vbaFreeObjList
rtcDoEvents
__vbaStrR8
__vbaR8Str
__vbaFPFix
__vbaFpI4
rtcErrObj
__vbaObjSet
__vbaFreeObj
__vbaVarDup
rtcBstrFromFormatVar
__vbaHresultCheckObj
__vbaNew2
__vbaStrCat
rtcGetPresentDate
__vbaOnError
__vbaPrintFile
rtcJoin
__vbaNextEachVar
__vbaRedimPreserve
__vbaVarZero
__vbaForEachVar
__vbaRedim
__vbaVarTstEq
__vbaI2I4
rtcSetFileAttr
__vbaPutOwner3
__vbaVar2Vec
__vbaAryMove
__vbaEnd
__vbaNextEachCollObj
__vbaForEachCollObj
rtcMakeDir
__vbaAryUnlock
__vbaAryLock
__vbaLenVar
__vbaVarIndexLoad
rtcInStrRev
rtcRightCharVar
__vbaAryDestruct
__vbaLateIdCallLd
__vbaCastObjVar
__vbaCastObj
rtcHexVarFromVar
__vbaVarAdd
VarPtr
__vbaObjSetAddref
rtcMsgBox
rtcLowerCaseVar
__vbaFileClose
rtcMidCharVar
__vbaStrVarVal
__vbaVarTstNe
__vbaLineInputStr
rtcEndOfFile
__vbaFileOpen
rtcDir
rtcImmediateIf
__vbaVarCat
__vbaLateIdSt
__vbaGenerateBoundsError
__vbaUbound
rtcSplit
__vbaAryVar
__vbaAryCopy
__vbaLenBstr
rtcCommandVar
__vbaVarMove
__vbaR8ErrVar
__vbaBoolVar
__vbaStrI4
__vbaR8IntI4
rtcRandomNext
rtcRandomize
rtcFileCopy
rtcKillFiles
__vbaVarMul
rtcRightCharBstr
rtcReplace
__vbaVarMod
__vbaVarDiv
__vbaVarOr
__vbaVarCmpNe
rtcFileLen
rtcFreeFile
rtcAnsiValueBstr
__vbaGetOwner3
__vbaI4ErrVar
rtcIsNumeric
__vbaStrI2
rtcLeftCharBstr
rtcCharValueBstr
__vbaLenVarB
rtcMidCharBstr
__vbaVarTstLe
__vbaVarSub
rtcStringVar
rtcR8ValFromBstr
__vbaR8FixI4
__vbaInStr
__vbaLenBstrB
rtcStrConvVar2
__vbaUI1I4
__vbaStrErrVarCopy
__vbaI4Str
rtcSpaceVar
__vbaAryConstruct2
__vbaVarCopy
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaVarCmpEq
__vbaVarAnd
__vbaBoolVarNull
__vbaUI1I2
__vbaErase
__vbaFpR8
__vbaLsetFixstr
__vbaStrFixstr
__vbaMidStmtBstr
__vbaLbound
__vbaFpUI1
__vbaI4Abs
__vbaStrUI1
__vbaVarVargNofree
rtcTypeName
rtcShell
__vbaVarTstGt
rtcGetSecondOfMinute
rtcGetMinuteOfHour
rtcGetHourOfDay
__vbaVarCmpGe
__vbaVarCmpLe
__vbaVarCmpLt
__vbaVarCmpGt
__vbaR8Var
__vbaUI1Var
__vbaUI1Str
__vbaVarTstGe
rtcTrimBstr
rtcUpperCaseVar
__vbaUI1ErrVar
rtcInputBox
__vbaRefVarAry
rtcEnvironVar
__vbaI2Var
rtcDateDiff
__vbaFpR4
__vbaCopyBytes
rtcBstrFromAnsi
rtcVarFromFormatVar
__vbaR4Var
__vbaVerifyVarObj
__vbaLateIdStAd
__vbaObjIs
rtcGetFileAttr
__vbaVarFix
__vbaVarIndexLoadRefLock
__vbaVarForNext
__vbaVarForInit
__vbaVargVarMove
__vbaVarNot
__vbaVarXor
__vbaVarIdiv
rtcChangeDir
rtcChangeDrive
__vbaRecDestructAnsi
__vbaLateMemCallLd
rtcFileLength
__vbaLsetFixstrFree
__vbaFixstrConstruct
__vbaPowerR8
__vbaRecDestruct
__vbaRecAssign
rtcVarBstrFromByte
rtcMidVar
rtcByteValueBstr
rtcHexBstrFromVar
__vbaVarInt
rtcSpaceBstr
__vbaR8IntI2
__vbaVarTstLt
rtcUpperCaseBstr
EVENT_SINK_QueryInterface
EVENT_SINK_AddRef
EVENT_SINK_Release
GetMem4
PutMem4
ThunRTMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c6d44ef837dc69f5d061afd03cc89e64

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.data Size: 64KB - Virtual size: 64KB

.rsrc Size: 192KB - Virtual size: 192KB

.mackt Size: 8KB - Virtual size: 8KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 64KB - Virtual size: 64KB

.rsrc
Size: 192KB - Virtual size: 192KB

.mackt
Size: 8KB - Virtual size: 8KB