a93e7d60b265af2e874bcc28f9ad50c7[.]exe

General

Target
a93e7d60b265af2e874bcc28f9ad50c7.exe
Size 196KB
Sample240107-yb7tyacgam
SHA256 6803ccdc27c5cfc9698c965d46bfc64ac7eee1fb2baddbc2901ccc8f6dd90f1d
MD5 a93e7d60b265af2e874bcc28f9ad50c7
SHA1 9c0d53bf63bc8ec08c8b4af0a4252db0f1d32a36
SHA512 4e8e0551078492c948e5c2aac43e920aac01c2e9b74f18869e01a8027f05f71f8633c20e9ba6c03c8c206dc89252ad1551f336e3f199a6aea60a58f9b90c01f5
SSDEEP 6144:u3ayGHOU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7fn:u3rPr7FXlbWc3PuV/r+XUf39GZjJ21OT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93e7d60b265af2e874bcc28f9ad50c7.exe

File Explorer

a93e7d60b265af2e874bcc28f9ad50c7.exe

.exe 196KB

a93e7d60b265af2e874bcc28f9ad50c7.exe

IMPHASH 9875fa43f9ad02a2a668597a46134ff7
SHA256 6803ccdc27c5cfc9698c965d46bfc64ac7eee1fb2baddbc2901ccc8f6dd90f1d
MD5 a93e7d60b265af2e874bcc28f9ad50c7
SHA1 9c0d53bf63bc8ec08c8b4af0a4252db0f1d32a36
SHA512 4e8e0551078492c948e5c2aac43e920aac01c2e9b74f18869e01a8027f05f71f8633c20e9ba6c03c8c206dc89252ad1551f336e3f199a6aea60a58f9b90c01f5
SSDEEP 6144:u3ayGHOU6Pr7FXlbWc3PuV/rvGXUf39GZjJ21OhCJiviq2YWDppQ7fn:u3rPr7FXlbWc3PuV/r+XUf39GZjJ21OT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15100

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 ord187 __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList ord516 __vbaStrErrVarCopy __vbaVarFix _adj_fprem1 ord518 __vbaStrCat ord660 __vbaSetSystemError __vbaRecDestruct __vbaLenBstrB __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct ord669 __vbaVarIndexLoadRefLock __vbaExitProc __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad __vbaFpR4 __vbaBoolVar __vbaStrFixstr ord520 __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord709 __vbaVarZero ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaVarAbs ord528 __vbaStrCmp __vbaGet3 __vbaVarTstEq __vbaAryConstruct2 __vbaPutOwner3 DllFunctionCall __vbaVarOr __vbaFpUI1 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaFpCmpCy __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord607 ord608 __vbaFPException ord717 __vbaInStrVar __vbaStrVarVal ord533 __vbaUbound __vbaVarCat __vbaGetOwner4 ord535 __vbaI2Var ord644 ord645 _CIlog __vbaFileOpen __vbaR8Str __vbaNew2 ord570 __vbaInStr __vbaVar2Vec __vbaVarInt _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaVarNot __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarCopy __vbaFpI4 ord617 _CIatan __vbaStrMove __vbaAryCopy ord619 __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj __vbaI4ErrVar ord581

Sharing