2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b

General

Target
2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b
Size 108KB
Sample230523-x4feqagh72
SHA256 2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b
MD5 1ab38abb39bbb11e927ec9774c69fb25
SHA1 dfd73b5835fccd4c05baa7a29c5362a1978557e2
SHA512 ca9d61d0b60008f542f3783d0fd1fe8acf0b05e013666401b63e95dbcb26ad83aebc6684d3c4298ca2661db7bc23b03a6c6b24d7269bbea7dcad47d628904cc9
SSDEEP 1536:2Am0PX7zsSwDzONZqQdrstOVj3N+XkGapkzfPoWr7MXLwgEVbh/C:JLX/kDyQp/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b

File Explorer

2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b

.exe 108KB

2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b

IMPHASH 2dfc57b444732430dced905a53f5c513
SHA256 2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b
MD5 1ab38abb39bbb11e927ec9774c69fb25
SHA1 dfd73b5835fccd4c05baa7a29c5362a1978557e2
SHA512 ca9d61d0b60008f542f3783d0fd1fe8acf0b05e013666401b63e95dbcb26ad83aebc6684d3c4298ca2661db7bc23b03a6c6b24d7269bbea7dcad47d628904cc9
SSDEEP 1536:2Am0PX7zsSwDzONZqQdrstOVj3N+XkGapkzfPoWr7MXLwgEVbh/C:JLX/kDyQp/
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5912

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaI4Abs __vbaObjSet __vbaOnError ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaStrFixstr ord520 ord522 __vbaFpR8 _CIsin ord525 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaStrCmp __vbaI2I4 DllFunctionCall __vbaCastObjVar _adj_fpatan __vbaLateIdCallLd __vbaRecUniToAnsi EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaPrintFile ord712 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaStrVarVal __vbaVarCat ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaStrToAnsi __vbaVarDup ord613 __vbaFpI2 ord616 __vbaFpI4 __vbaRecDestructAnsi ord617 _CIatan __vbaStrMove ord619 _allmul _CItan _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

2b0b831b99f01b4c207033fd824859e7ff5cc04ec2cfca933f55c5296cb36f7b

msvbvm60