492e7d6747013b67630122f49cf3464c[.]exe

General

Target
492e7d6747013b67630122f49cf3464c.exe
Size 216KB
Sample240107-xznwasdbd4
SHA256 79f908bf59620e9f095763555676dcc42d9dd703841bf667a68c913f8a5a1664
MD5 492e7d6747013b67630122f49cf3464c
SHA1 4a359fdf3bf92c39c9ee89e36d206cafc1ea0f45
SHA512 a0bc1196ec232ffeefa9b0e6950f18d46f2790cffee2811fe6dde22226ae7dbd0f281492e68c8a72cd7e64528d5bf93f491b051265b6027266754fcf97beb896
SSDEEP 6144:f4/oDdJzpTlbwEhYKFIGuhtFaA6Tuyrj:fpFJ+IIGusduy
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492e7d6747013b67630122f49cf3464c.exe

File Explorer

492e7d6747013b67630122f49cf3464c.exe

.exe 216KB

492e7d6747013b67630122f49cf3464c.exe

IMPHASH cc776ca3d781080cb1217e1f7534103b
SHA256 79f908bf59620e9f095763555676dcc42d9dd703841bf667a68c913f8a5a1664
MD5 492e7d6747013b67630122f49cf3464c
SHA1 4a359fdf3bf92c39c9ee89e36d206cafc1ea0f45
SHA512 a0bc1196ec232ffeefa9b0e6950f18d46f2790cffee2811fe6dde22226ae7dbd0f281492e68c8a72cd7e64528d5bf93f491b051265b6027266754fcf97beb896
SSDEEP 6144:f4/oDdJzpTlbwEhYKFIGuhtFaA6Tuyrj:fpFJ+IIGusduy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryW

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaHresultCheck ord693 __vbaVarVargNofree __vbaFreeVar __vbaAryMove ord694 __vbaStrVarMove __vbaLenBstr ord695 ord696 __vbaEnd __vbaFreeVarList __vbaPut3 _adj_fdiv_m64 __vbaPut4 ord512 ord513 ord514 ord515 ord516 ord517 _adj_fprem1 ord518 ord519 __vbaCopyBytes ord628 __vbaStrCat ord629 __vbaInStrVarB __vbaLsetFixstr __vbaHresultCheckObj __vbaLenBstrB __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaVarIndexLoadRefLock ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord520 __vbaStrFixstr ord521 ord522 __vbaBoolVarNull __vbaFpR8 _CIsin ord709 __vbaErase ord631 ord524 ord632 __vbaVarZero ord525 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaGet3 __vbaVarTstEq __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 ord670 __vbaVarOr ord564 __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface ord710 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaVarDiv ord607 __vbaI2Str ord608 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal __vbaUbound __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord648 __vbaInStr __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaVarNot __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy ord616 ord431 __vbaFpI4 __vbaUnkVar ord617 _CIatan __vbaStrMove ord618 __vbaAryCopy __vbaCastObj ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt _CIexp __vbaMidStmtBstr __vbaFreeObj __vbaFreeStr __vbaI4ErrVar

Sharing