697e4468ce5cb19b6d9fda8b50dd873a

Reason

config extraction: GuloaderBin: guloader: invalid shellcode

General

Target
697e4468ce5cb19b6d9fda8b50dd873a
Size 346KB
Sample240120-e53mjabggk
SHA256 22297aa15340a6dda899b06bba29c2f1470d698c875b3096d01ad5f940697edc
MD5 697e4468ce5cb19b6d9fda8b50dd873a
SHA1 14bb70da7928a73c0c5c7902da85370cd3cdd4d0
SHA512 191f870bb1ecb5249dbeeb5ed4b1bdd2077f9cb81bb58ede867b6ce03020a9d3559e5068d15fd1bd7a90b5afe773245bc4e312db12d2329dc2799d2c17ce8973
SSDEEP 6144:ussACqcX6x+CIK5avRGPwVIh4MbmZnlAZxcl5h65kdSIsamc9i2yEA1ZPHTcr5+m:mA7vr5omh4MCZnlfl5gsSIPT/igs2t3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697e4468ce5cb19b6d9fda8b50dd873a

File Explorer

697e4468ce5cb19b6d9fda8b50dd873a

.exe 346KB

697e4468ce5cb19b6d9fda8b50dd873a

IMPHASH f208ce4f4cc0cfe116ac513c69b94457
SHA256 22297aa15340a6dda899b06bba29c2f1470d698c875b3096d01ad5f940697edc
MD5 697e4468ce5cb19b6d9fda8b50dd873a
SHA1 14bb70da7928a73c0c5c7902da85370cd3cdd4d0
SHA512 191f870bb1ecb5249dbeeb5ed4b1bdd2077f9cb81bb58ede867b6ce03020a9d3559e5068d15fd1bd7a90b5afe773245bc4e312db12d2329dc2799d2c17ce8973
SSDEEP 6144:ussACqcX6x+CIK5avRGPwVIh4MbmZnlAZxcl5h65kdSIsamc9i2yEA1ZPHTcr5+m:mA7vr5omh4MCZnlfl5gsSIPT/igs2t3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

__vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaNextEachVar ord516 _adj_fprem1 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 DllFunctionCall _adj_fpatan __vbaRedim EVENT_SINK_Release ord601 _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord644 _CIlog __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaForEachVar _allmul _CItan __vbaUI1Var __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

Errors

General

Malware Config

Signatures

File Explorer

697e4468ce5cb19b6d9fda8b50dd873a

msvbvm60.dll

generic