0296536745958de8cb265ace48e56f35

General

Target

0296536745958de8cb265ace48e56f35
Size

65KB
MD5

0296536745958de8cb265ace48e56f35
SHA1

b3bf7bf112ef6795a5f2a7aa854ade2d179daf70
SHA256

c64b2da3624162e4d2d0328c9883de5afe09e0977ce6327d74889b78415234db
SHA512

786ddbe5ebbd0b98b4c8fee744b8d81ad76c396fa978e1ff89f88859c2be32abed0c5cdaeeade7c0935406188296c8975d88272de533a92febc24a9ed7d94806
SSDEEP

768:xo/suFt4F8uDLFgeOf/R4UnSiM2tfMAoSbWso74mRrEXubebGy3io6dhmxR1YBVg:xZFLihgEgebGynZxR1YBVvO6EjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0296536745958de8cb265ace48e56f35

Files

0296536745958de8cb265ace48e56f35
.exe windows:4 windows x86 arch:x86

236075f6c5e41dfad19127bb35a578eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

EVENT_SINK_GetIDsOfNames
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
ord622
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord529
__vbaStrCmp
__vbaI2I4
DllFunctionCall
_adj_fpatan
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaFPException
ord319
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaAryLock
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaFpI2
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

236075f6c5e41dfad19127bb35a578eb

Headers

File Characteristics

Imports

msvbvm50

Sections

.text Size: 51KB - Virtual size: 50KB

.data Size: 512B - Virtual size: 7KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 51KB - Virtual size: 50KB

.data
Size: 512B - Virtual size: 7KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 4KB