3e6480f8ee2622f9ebebcab47f10859a8102649ad44987d6b0599a8c70a0f4fe

Reason

config extraction: GuloaderBin: guloader: invalid shellcode

General

Target

3e6480f8ee2622f9ebebcab47f10859a8102649ad44987d6b0599a8c70a0f4fe
Size

168KB
MD5

2e577754aa974065d4ac2136d7a7fc60
SHA1

4ce5dbc2105791bd0ae5042f0596fa4b4c5d2b33
SHA256

3e6480f8ee2622f9ebebcab47f10859a8102649ad44987d6b0599a8c70a0f4fe
SHA512

102a5a716bea7a4eea1a631e389a1bcca6141454a683067587ebd63c30473bc3d7e9311753782c2a425ec85114ba3d76b81a4790406b3694973fea09804a5b5b
SSDEEP

3072:aKMQloq9f1xDH0+N5xyPkXDMk6RqwqPVl:aKMg7zT2sM9BGj

Score

N/A

Malware Config

Signatures

Files

3e6480f8ee2622f9ebebcab47f10859a8102649ad44987d6b0599a8c70a0f4fe
.exe windows x86

46e894f4d0f086903eb574a7930700bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaAryMove
__vbaCyMul
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
ord513
_adj_fprem1
ord441
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord669
__vbaOnError
__vbaCyAdd
_adj_fdiv_m16i
_adj_fdivr_m16i
ord520
__vbaBoolVar
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaAryConstruct2
__vbaCyI4
__vbaI2I4
__vbaCySub
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaUI1I4
__vbaFpCmpCy
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaFPException
ord717
__vbaUbound
__vbaGetOwner3
ord644
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVar2Vec
__vbaNew2
ord570
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarCmpEq
__vbaAryLock
__vbaVarAdd
__vbaVarDup
_CIatan
__vbaStrMove
__vbaAryCopy
__vbaI4Cy
__vbaStrVarCopy
_allmul
_CItan
__vbaAryUnlock
__vbaUI1Var
_CIexp
__vbaI4ErrVar
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

46e894f4d0f086903eb574a7930700bc

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 148KB - Virtual size: 147KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 148KB - Virtual size: 147KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 9KB