931ba8bfb7b58bb012d123261b9ccedf

General

Target
931ba8bfb7b58bb012d123261b9ccedf
Size 768KB
Sample240205-1wmqlsheb5
SHA256 c11de1b2329d4574240777ff1d59b849439f9e805c5c4ade50b4d912316edb49
MD5 931ba8bfb7b58bb012d123261b9ccedf
SHA1 539fbfa32783bd594be2a5025ae775bf4a76386a
SHA512 7877b71ee7c1bfa90a3485ee6d60f7bc2ebc857c5005f961dea95c59a0861c24c7ad2f917b88bda729692cc2cd1c07a92edc716b1292b6d049790db900fd8c1f
SSDEEP 12288:wKTzdQO7b30SGV9KrdvDaVkvIlLACz6vy1wskXf2aTogivJDBZn8aUiaku2:zTzdQO7z0rydvDdIKCz6vVskX1iB1Z8G
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
931ba8bfb7b58bb012d123261b9ccedf

File Explorer

931ba8bfb7b58bb012d123261b9ccedf

.exe 768KB

931ba8bfb7b58bb012d123261b9ccedf

IMPHASH a7350f8888b8242342f6c032546b567d
SHA256 c11de1b2329d4574240777ff1d59b849439f9e805c5c4ade50b4d912316edb49
MD5 931ba8bfb7b58bb012d123261b9ccedf
SHA1 539fbfa32783bd594be2a5025ae775bf4a76386a
SHA512 7877b71ee7c1bfa90a3485ee6d60f7bc2ebc857c5005f961dea95c59a0861c24c7ad2f917b88bda729692cc2cd1c07a92edc716b1292b6d049790db900fd8c1f
SSDEEP 12288:wKTzdQO7b30SGV9KrdvDaVkvIlLACz6vy1wskXf2aTogivJDBZn8aUiaku2:zTzdQO7z0rydvDdIKCz6vVskX1iB1Z8G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaStrVarMove __vbaLenBstr __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 __vbaAryDestruct __vbaForEachCollObj __vbaVarForInit __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaBoolVar __vbaBoolVarNull _CIsin ord631 ord709 __vbaErase __vbaNextEachCollObj __vbaVarZero ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaObjVar ord561 __vbaI2I4 DllFunctionCall __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode ord712 _adj_fprem _adj_fdivr_m64 ord716 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaI2Var ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord100 ord579 __vbaVarSetVar __vbaI4Var __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrToAnsi __vbaVarMod __vbaVarCopy __vbaFpI4 ord616 _CIatan __vbaCastObj __vbaAryCopy __vbaStrMove _allmul __vbaLateIdSt _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

931ba8bfb7b58bb012d123261b9ccedf

msvbvm60

generic