f3ec2ac5f8cd8dfb46f3a4d14acc4c84[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f3ec2ac5f8cd8dfb46f3a4d14acc4c84.exe
Size

293KB
MD5

f3ec2ac5f8cd8dfb46f3a4d14acc4c84
SHA1

45cc84a525944b49a77bb693e2cc6f9e38e7d27c
SHA256

de2346e7683a4ed34d62a2954a38949335e6c1b27085a1cc82c08b0c6aec514e
SHA512

890a5881861259344ae46ac43edffaf86a203604175da1c85b6b5964c61b9dff7b68d7c5191689913ac9adb11332b7c085ac5ca317124bea309641e7a702cbc3
SSDEEP

6144:YDq5Bew/EF3ZSblslZpJJH6Rq+RgHrAfkYb3uMlJDslZlv:oq5B03ZuuJJH6Rq+RgHrAfkYb3uMlJD0

Score

1^/10

Malware Config

Signatures

Files

f3ec2ac5f8cd8dfb46f3a4d14acc4c84.exe
.exe windows:4 windows x86 arch:x86

5d381009aa02642f69cd0e68c8f0d91a

Code Sign

Certificate

Issuer

CN=olof,OU=Studentermoederne,O=successiv,L=Tutorizes,ST=FLYVEGLERNES,C=OM,1.2.840.113549.1.9.1=#0c1b53656d69636976696c6973656436405564747261656b332e436972

Not Before

26/07/2021, 21:03

Not After

26/07/2022, 21:03

Subject

CN=olof,OU=Studentermoederne,O=successiv,L=Tutorizes,ST=FLYVEGLERNES,C=OM,1.2.840.113549.1.9.1=#0c1b53656d69636976696c6973656436405564747261656b332e436972

b0:f6:f6:54:08:07:ce:93:ed:b1:8a:2c:4d:a0:0d:d9:15:e2:da:b7:11:c5:4d:7b:6f:15:f7:f2:9f:57:ed:cb
Signer

Actual PE Digest

b0:f6:f6:54:08:07:ce:93:ed:b1:8a:2c:4d:a0:0d:d9:15:e2:da:b7:11:c5:4d:7b:6f:15:f7:f2:9f:57:ed:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
ord693
__vbaFreeVar
__vbaAryMove
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
ord554
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryDestruct
__vbaVarForInit
ord300
ord594
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
ord703
ord599
ord306
ord706
__vbaFpR8
_CIsin
ord632
ord525
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
DllFunctionCall
_adj_fpatan
ord568
__vbaLateIdCallLd
__vbaRedim
ord678
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaStrVarVal
_CIlog
__vbaErrorOverflow
ord646
__vbaFileOpen
__vbaNew2
__vbaR8Str
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
ord680
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
ord614
ord617
_CIatan
__vbaStrMove
__vbaCastObj
ord541
ord650
_allmul
__vbaLateIdSt
ord651
_CItan
ord546
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d381009aa02642f69cd0e68c8f0d91a

Code Sign

Certificate

b0:f6:f6:54:08:07:ce:93:ed:b1:8a:2c:4d:a0:0d:d9:15:e2:da:b7:11:c5:4d:7b:6f:15:f7:f2:9f:57:ed:cbSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 248KB - Virtual size: 247KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 36KB - Virtual size: 34KB

b0:f6:f6:54:08:07:ce:93:ed:b1:8a:2c:4d:a0:0d:d9:15:e2:da:b7:11:c5:4d:7b:6f:15:f7:f2:9f:57:ed:cb
Signer

.text
Size: 248KB - Virtual size: 247KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 36KB - Virtual size: 34KB