ad01afce5eb8d78f9e29c0e4b6202152[.]exe

General

Target
ad01afce5eb8d78f9e29c0e4b6202152.exe
Size 220KB
Sample240107-x9ltpadec3
SHA256 2659c27e32443e1e9a934f2c4ae8e8e9593c685d174bb2f7a61c7c9d0d0c06a2
MD5 ad01afce5eb8d78f9e29c0e4b6202152
SHA1 860742002557a77bebd4dc7df24f829783d4fe5b
SHA512 ae7914c32765dc1a392e581fc7b68665dd42b34361bd36e1eed784fc56021bc9735db2aeda2c98bc7a7b2f44f53afe0d3c478549bd557f350228c05bbbcf57a4
SSDEEP 3072:koGTiTXxCW2MWq6w7Q22t/LZ7JmXIKanK8kM6C0TXPquf:GKxB2E7Q22/LGXqaM6hy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad01afce5eb8d78f9e29c0e4b6202152.exe

File Explorer

ad01afce5eb8d78f9e29c0e4b6202152.exe

.exe 220KB

ad01afce5eb8d78f9e29c0e4b6202152.exe

IMPHASH 986283b4a993506f83eb1b2760b4b2b9
SHA256 2659c27e32443e1e9a934f2c4ae8e8e9593c685d174bb2f7a61c7c9d0d0c06a2
MD5 ad01afce5eb8d78f9e29c0e4b6202152
SHA1 860742002557a77bebd4dc7df24f829783d4fe5b
SHA512 ae7914c32765dc1a392e581fc7b68665dd42b34361bd36e1eed784fc56021bc9735db2aeda2c98bc7a7b2f44f53afe0d3c478549bd557f350228c05bbbcf57a4
SSDEEP 3072:koGTiTXxCW2MWq6w7Q22t/LZ7JmXIKanK8kM6C0TXPquf:GKxB2E7Q22/LGXqaM6hy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5044

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord690 _CIcos _adj_fptan ord586 __vbaFreeVar __vbaStrVarMove ord588 __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaObjSet ord595 _adj_fdiv_m16i _adj_fdivr_m16i ord598 ord703 ord705 __vbaFpR8 _CIsin __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 ord560 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaLateIdCallLd ord569 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 ord531 __vbaFPException ord536 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var ord611 __vbaStrToAnsi __vbaVarDup __vbaFpI4 ord616 __vbaRecDestructAnsi _CIatan __vbaStrMove ord541 _allmul _CItan _CIexp __vbaFreeObj __vbaFreeStr ord580

Sharing