a8bd53db569c7406000e2078e236cca75e5a6067939c1d776fe128bc64367dff

Sharing

Copy URL Twitter E-mail

General

Target

a8bd53db569c7406000e2078e236cca75e5a6067939c1d776fe128bc64367dff
Size

449KB
MD5

d6a96f24492dc6ff8a2cd985e74c915f
SHA1

ccdea2cd48d00e1a712cf254fe89ce664299b373
SHA256

a8bd53db569c7406000e2078e236cca75e5a6067939c1d776fe128bc64367dff
SHA512

99e3e93e375fd9ba63573a07cd20bbb5dd18536ce9750694f0699a07cab44b8070a80cca87de1660cf6871a1a4a032031941500cc8636e5e67e2a6b371f2794f
SSDEEP

6144:pIqrU3nNKOyg/JGVh4RTYb9p+TdiWJ6C7226cYb9plR1a:pIqr+ACJKhaTacdic6iFar1a

Score

N/A

Malware Config

Signatures

Files

a8bd53db569c7406000e2078e236cca75e5a6067939c1d776fe128bc64367dff
.exe windows x86

7b63a20ce740419571ff76dd28bb6114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
EVENT_SINK_Invoke
ord621
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaVarCmpNe
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaExitProc
__vbaForEachCollObj
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord520
__vbaFpR8
__vbaBoolVarNull
_CIsin
__vbaErase
ord631
ord632
__vbaNextEachCollObj
__vbaVarZero
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord529
__vbaStrCmp
__vbaGet3
__vbaVarTstEq
__vbaAryConstruct2
ord561
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
__vbaLateIdCallSt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaInStrVar
ord717
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaCheckType
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaR8Str
ord648
__vbaNew2
__vbaVar2Vec
__vbaInStr
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
ord681
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaLateMemCall
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
__vbaFpI2
__vbaFpI4
__vbaVarLateMemCallLd
ord616
__vbaR8IntI2
ord617
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.TEXT
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RsRc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b63a20ce740419571ff76dd28bb6114

Headers

File Characteristics

Imports

msvbvm60

Sections

.TEXT Size: 340KB - Virtual size: 339KB

.DATA Size: 4KB - Virtual size: 19KB

.RsRc Size: 100KB - Virtual size: 98KB

.TEXT
Size: 340KB - Virtual size: 339KB

.DATA
Size: 4KB - Virtual size: 19KB

.RsRc
Size: 100KB - Virtual size: 98KB