79df5a2d8c9db72f36d4b5d8d13c0582

General

Target
79df5a2d8c9db72f36d4b5d8d13c0582
Size 339KB
Sample240127-leew4sbadk
SHA256 17e910f84b7e4577cc1962a917cdd3d4033556f1c7ea1cb6d8c0fc6289413e90
MD5 79df5a2d8c9db72f36d4b5d8d13c0582
SHA1 d2ed206d5a7a3f8ba6d7c5c40c23cd0893a124c6
SHA512 32f44e0221a7fe7d839f6b49d749e5ecb8de6f0ffc7e8929c56cfa20c1c2f5261ff40858af8912b52aeaabe1aafaed5cc2b15f18b42fc481bd121640925eeda1
SSDEEP 6144:Lb10YeUbXiDz+rBeeZeVAd2Z6CzSEi95JYMTDlcGHX0/UN9M5FQJYgGo1AEGsn6j:X1nemiD6rB/Zew2ZreNHJtTZHLIHQugc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79df5a2d8c9db72f36d4b5d8d13c0582

File Explorer

79df5a2d8c9db72f36d4b5d8d13c0582

.exe 339KB

79df5a2d8c9db72f36d4b5d8d13c0582

IMPHASH 4a8ce9217fe7849676cc34a20e0bfa28
SHA256 17e910f84b7e4577cc1962a917cdd3d4033556f1c7ea1cb6d8c0fc6289413e90
MD5 79df5a2d8c9db72f36d4b5d8d13c0582
SHA1 d2ed206d5a7a3f8ba6d7c5c40c23cd0893a124c6
SHA512 32f44e0221a7fe7d839f6b49d749e5ecb8de6f0ffc7e8929c56cfa20c1c2f5261ff40858af8912b52aeaabe1aafaed5cc2b15f18b42fc481bd121640925eeda1
SSDEEP 6144:Lb10YeUbXiDz+rBeeZeVAd2Z6CzSEi95JYMTDlcGHX0/UN9M5FQJYgGo1AEGsn6j:X1nemiD6rB/Zew2ZreNHJtTZHLIHQugc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60.dll

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaRaiseEvent _adj_fprem1 __vbaCopyBytes __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 __vbaAryVar __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i _CIsin __vbaErase __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 DllFunctionCall __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaGetOwner3 __vbaUbound ord644 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord578 ord685 ord100 __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI4 __vbaVarCopy _CIatan __vbaStrMove __vbaAryCopy __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

79df5a2d8c9db72f36d4b5d8d13c0582

msvbvm60.dll

generic