70764bf0c656b298ea64e7e13750dc1d327715b4c72250cb788e681afcce33b3

Sharing

Copy URL

Twitter E-mail

General

Target

70764bf0c656b298ea64e7e13750dc1d327715b4c72250cb788e681afcce33b3
Size

3.9MB
MD5

3c8b227891061befe38de67c0442cbae
SHA1

0f7e21bbc136003090a9da706f3ba60ccc696092
SHA256

70764bf0c656b298ea64e7e13750dc1d327715b4c72250cb788e681afcce33b3
SHA512

c66e9a885dc9c2df4f64d04132012e9103b5fb4ed4c6ed84117212649019ca336f779ad2c556c3d5957e123037a65dd27b94a827d0387a23d7c2069f7417b314
SSDEEP

98304:mvIYM+HXzmqu/D7/fOZ4IZSSC7T9+OgfmIwdrA0GUBvZnN9JCqstt1pvDKCojeji:mQo3u/D7/fOZ4IZm7T9+OgfmIwdrA0G2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70764bf0c656b298ea64e7e13750dc1d327715b4c72250cb788e681afcce33b3

Files

70764bf0c656b298ea64e7e13750dc1d327715b4c72250cb788e681afcce33b3
.exe windows x86

47383a7a2f922e7132cdda00b349a9ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaVarTstGt
ord690
__vbaStrI2
__vbaNextEachAry
_CIcos
_adj_fptan
__vbaStrAryToUnicode
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaStrAryToAnsi
__vbaCyMul
__vbaFreeVar
__vbaLineInputStr
ord588
__vbaLateIdCall
__vbaStrVarMove
__vbaLenBstr
ord696
__vbaVarIdiv
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaVarIndexStore
ord513
__vbaNextEachVar
__vbaRaiseEvent
ord515
__vbaFreeObjList
ord516
ord517
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaRecAnsiToUni
ord626
ord550
__vbaResume
__vbaVarCmpNe
__vbaStrCat
__vbaForEachCollAd
__vbaBoolErrVar
__vbaCyInt
ord553
__vbaLsetFixstr
ord660
__vbaRecDestruct
__vbaStrDate
__vbaSetSystemError
__vbaHresultCheckObj
ord662
ord557
ord665
ord558
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
ord559
__vbaAryVar
Zombie_GetTypeInfo
ord668
__vbaAryDestruct
__vbaVarIndexLoadRefLock
ord591
__vbaLateMemSt
ord592
ord593
__vbaStrBool
__vbaForEachCollObj
__vbaBoolStr
__vbaVarForInit
__vbaExitProc
ord300
ord301
__vbaStrLike
__vbaCyAdd
__vbaObjSet
ord595
__vbaOnError
ord302
ord596
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
ord305
__vbaFpR4
ord306
__vbaStrFixstr
__vbaForEachCollVar
ord520
__vbaBoolVar
ord307
ord308
ord309
__vbaFpR8
__vbaBoolVarNull
__vbaRefVarAry
__vbaVarTstLt
_CIsin
ord631
__vbaErase
__vbaVarZero
__vbaNextEachCollObj
__vbaVarCmpGt
__vbaVargVarMove
ord632
__vbaChkstk
ord526
__vbaFileClose
__vbaCyVar
EVENT_SINK_AddRef
__vbaVarAbs
ord528
__vbaGenerateBoundsError
__vbaExitEachColl
__vbaCyI2
__vbaStrCmp
__vbaVarTstEq
__vbaAryConstruct2
__vbaR4Str
ord560
__vbaDateR8
__vbaPrintObj
__vbaVarLikeVar
__vbaNextEachCollVar
ord561
__vbaObjVar
__vbaI2I4
DllFunctionCall
ord563
__vbaVarLateMemSt
__vbaVarOr
ord670
__vbaCySub
__vbaCastObjVar
__vbaStrR4
__vbaLbound
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaR4Cy
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaStrR8
__vbaR8Cy
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
ord601
__vbaUI1I2
_CIsqrt
__vbaRedimVar
__vbaLateIdCallSt
__vbaObjIs
__vbaVarAnd
ord311
EVENT_SINK_QueryInterface
__vbaFpCmpCy
ord710
__vbaVarMul
__vbaExceptHandler
ord711
ord313
__vbaStrToUnicode
ord712
__vbaPrintFile
ord314
__vbaR4ErrVar
ord606
__vbaDateStr
_adj_fprem
_adj_fdivr_m64
ord315
__vbaLateIdStAd
__vbaI2Str
__vbaVarDiv
ord714
ord607
ord316
ord608
__vbaVarCmpLe
ord716
__vbaFPException
__vbaInStrVar
ord717
ord319
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaCheckType
__vbaDateVar
__vbaI2Var
ord644
ord537
ord645
ord538
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaVarLateMemCallLdRf
__vbaNew2
__vbaR8Str
ord571
__vbaCyMulI2
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaI4Str
ord681
__vbaVarNot
__vbaVarCmpLt
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaForEachAry
ord689
__vbaVarCmpEq
ord610
__vbaFpCy
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
ord320
ord612
__vbaFreeVarg
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaVerifyVarObj
__vbaFpI2
__vbaVarTstGe
ord616
__vbaUnkVar
__vbaVarCopy
__vbaFpI4
__vbaVarLateMemCallLd
__vbaVarSetObjAddref
__vbaR8IntI2
__vbaRecDestructAnsi
__vbaCyAbs
__vbaLateMemCallLd
ord617
_CIatan
ord618
__vbaCastObj
__vbaStrMove
__vbaAryCopy
__vbaForEachVar
__vbaStrVarCopy
ord619
__vbaI4Cy
ord542
_allmul
__vbaLateIdSt
__vbaLenVarB
ord545
__vbaLateMemCallSt
_CItan
__vbaNextEachCollAd
ord546
__vbaFPInt
__vbaAryUnlock
ord548
__vbaVarForNext
_CIexp
__vbaStrCy
__vbaFreeObj
__vbaFreeStr
ord581

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47383a7a2f922e7132cdda00b349a9ab

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.data Size: 4KB - Virtual size: 146KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 3.9MB - Virtual size: 3.9MB

.data
Size: 4KB - Virtual size: 146KB

.rsrc
Size: 4KB - Virtual size: 1KB