a05edb5477d2d7455ea8055a66746c1541eb189d70cd3[.]exe

General

Target
a05edb5477d2d7455ea8055a66746c1541eb189d70cd3.exe
Size 480KB
Sample230601-lvgqmsde87
SHA256 a05edb5477d2d7455ea8055a66746c1541eb189d70cd37a2f9da3d2e2dbb1dc3
MD5 badf16b5411ab2ec95f1dd8cdbb02d8e
SHA1 6ef714929dbc886613053e6444872793f56059be
SHA512 1cfae35ddd7a1695b50a5c08e19c35115d49e15fd6694f9188455a26f334fc6867da8befb15cc6a0c369b096b53950db48e9dd915a38e7151459271756d2ffbb
SSDEEP 12288:qZ3IOfnw1bRqbMeeVBJRl31WBuA1/dTpWCw:qZ3IO4tRqbyBJvFWIA11FWCw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a05edb5477d2d7455ea8055a66746c1541eb189d70cd3.exe

File Explorer

a05edb5477d2d7455ea8055a66746c1541eb189d70cd3.exe

.exe 480KB

a05edb5477d2d7455ea8055a66746c1541eb189d70cd3.exe

IMPHASH d94418c011c0eac4400784b86bceb5fd
SHA256 a05edb5477d2d7455ea8055a66746c1541eb189d70cd37a2f9da3d2e2dbb1dc3
MD5 badf16b5411ab2ec95f1dd8cdbb02d8e
SHA1 6ef714929dbc886613053e6444872793f56059be
SHA512 1cfae35ddd7a1695b50a5c08e19c35115d49e15fd6694f9188455a26f334fc6867da8befb15cc6a0c369b096b53950db48e9dd915a38e7151459271756d2ffbb
SSDEEP 12288:qZ3IOfnw1bRqbMeeVBJRl31WBuA1/dTpWCw:qZ3IO4tRqbyBJvFWIA11FWCw
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

371266

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

CryptAcquireContextW CryptDeriveKey

kernel32

VirtualProtect CreateFileW Sleep GetTickCount WriteFile RtlFillMemory

msvbvm60

ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaLineInputStr __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 ord698 __vbaFreeObjList __vbaStrErrVarCopy _adj_fprem1 __vbaVarCmpNe __vbaStrCat __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVarNull __vbaRefVarAry _CIsin __vbaErase __vbaVarZero __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaStrCmp __vbaVarTstEq ord638 DllFunctionCall __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord713 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaFileOpen __vbaNew2 ord648 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaVarNot __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var ord689 __vbaVarAdd __vbaAryLock __vbaVarDup __vbaVarCopy ord616 _CIatan __vbaCastObj __vbaStrMove __vbaR8IntI4 _allmul __vbaLenVarB _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing