75129aa64ee308f0e0755c9a7fdb30c5

General

Target
75129aa64ee308f0e0755c9a7fdb30c5
Size 556KB
Sample240125-vvfysacdbl
SHA256 13dd6a998bbcb295ebfbb6e82b14adfdca5a89d48448384acb26657f749f1058
MD5 75129aa64ee308f0e0755c9a7fdb30c5
SHA1 61032ff1e1186fe131bcc098513d980b6c04df0a
SHA512 0a1085e251988806ecd3a8b56c48def1be56d1a2429bbe3895bc07fa7ca33c3209b472f9d46e9b368d7183215ab73d319bc874478ad1ea3d14e9fd1ffe63abb9
SSDEEP 12288:67Lo8Rs90X41cnOOWB2KpyYK4BVqZDx2mpmHPW9GROsI8w:67L1yMgcnOds44Fp2PWUDI8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75129aa64ee308f0e0755c9a7fdb30c5

File Explorer

75129aa64ee308f0e0755c9a7fdb30c5

.exe 556KB

75129aa64ee308f0e0755c9a7fdb30c5

IMPHASH 776e9ab675203b0bc2fb27cb2d49f9d3
SHA256 13dd6a998bbcb295ebfbb6e82b14adfdca5a89d48448384acb26657f749f1058
MD5 75129aa64ee308f0e0755c9a7fdb30c5
SHA1 61032ff1e1186fe131bcc098513d980b6c04df0a
SHA512 0a1085e251988806ecd3a8b56c48def1be56d1a2429bbe3895bc07fa7ca33c3209b472f9d46e9b368d7183215ab73d319bc874478ad1ea3d14e9fd1ffe63abb9
SSDEEP 12288:67Lo8Rs90X41cnOOWB2KpyYK4BVqZDx2mpmHPW9GROsI8w:67L1yMgcnOds44Fp2PWUDI8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6204

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaResume __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct ord593 __vbaExitProc __vbaVarForInit ord300 ord594 ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord306 __vbaFpR8 __vbaVarTstLt _CIsin __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaPutOwner3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve _adj_fpatan __vbaStrR8 __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str ord607 ord530 __vbaFPException ord717 __vbaUbound ord535 ord537 ord644 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaR8Str __vbaInStr __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaVarCopy __vbaVarLateMemCallLd __vbaFpI4 ord617 _CIatan __vbaStrMove _allmul _CItan __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

75129aa64ee308f0e0755c9a7fdb30c5

msvbvm60

generic