5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

General

Target
5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d
Size 808KB
Sample240218-kftafsgd22
SHA256 5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d
MD5 c85006435a7893fcf600bddbb085a65e
SHA1 c35071652eaf8654ca889136ac5866fd558dfe50
SHA512 7b7fe52cc09e5df959ac36ca8e155235667fa3156529fbe76b56b242b3ce1054a11858596dfb21fea2f3fb2244fcf17982fdce4f4602d300f9ab275093b8e961
SSDEEP 12288:liRIlo9kf6Wtg5OF56k2L4FC3HshSHvGKaraZQi8izSsPKloVTvxzH:6IloYg5O/t2L4FC3GSc9KSoVTvp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

File Explorer

5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

.exe 808KB

5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

IMPHASH 6829210fcf455096231096f6e840a36c
SHA256 5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d
MD5 c85006435a7893fcf600bddbb085a65e
SHA1 c35071652eaf8654ca889136ac5866fd558dfe50
SHA512 7b7fe52cc09e5df959ac36ca8e155235667fa3156529fbe76b56b242b3ce1054a11858596dfb21fea2f3fb2244fcf17982fdce4f4602d300f9ab275093b8e961
SSDEEP 12288:liRIlo9kf6Wtg5OF56k2L4FC3HshSHvGKaraZQi8izSsPKloVTvxzH:6IloYg5O/t2L4FC3GSc9KSoVTvp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5076

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaHresultCheck __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLineInputStr ord695 __vbaLenBstr __vbaStrVarMove __vbaLateIdCall ord696 __vbaVarIdiv __vbaPut3 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord698 __vbaPut4 __vbaVarIndexStore __vbaNextEachVar __vbaFreeObjList ord516 __vbaVarIndexLoadRef __vbaStrErrVarCopy _adj_fprem1 ord518 __vbaRecAnsiToUni ord519 __vbaResume __vbaVarCmpNe ord629 __vbaStrCat ord660 __vbaLsetFixstr ord553 __vbaStrDate __vbaRecDestruct __vbaSetSystemError ord661 __vbaLenBstrB __vbaHresultCheckObj ord662 ord557 __vbaLenVar ord558 _adj_fdiv_m32 __vbaVarTstLe ord666 __vbaAryVar __vbaVarXor __vbaAryDestruct ord591 __vbaVarIndexLoadRefLock __vbaVarForInit ord593 __vbaForEachCollObj __vbaExitProc __vbaFileCloseAll __vbaI4Abs ord594 __vbaObjSet ord595 __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaVarIndexLoad ord598 ord520 __vbaStrFixstr __vbaBoolVar __vbaBoolVarNull __vbaVargVar __vbaFpR8 __vbaRefVarAry __vbaVarTstLt _CIsin __vbaErase ord525 __vbaVarCmpGt __vbaVargVarMove ord632 __vbaNextEachCollObj __vbaChkstk __vbaFileClose EVENT_SINK_AddRef ord527 __vbaVarAbs ord528 __vbaGenerateBoundsError __vbaExitEachColl __vbaGet3 ord529 __vbaStrCmp __vbaAryConstruct2 __vbaPutOwner3 __vbaVarTstEq ord560 __vbaDateR8 __vbaObjVar ord561 __vbaI2I4 DllFunctionCall ord563 __vbaVarLateMemSt __vbaVarOr ord564 __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct ord569 __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew __vbaUI1I2 ord601 _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaStr2Vec __vbaVarMul __vbaStrUI1 __vbaUI1I4 __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 __vbaDateStr _adj_fprem _adj_fdivr_m64 ord714 ord607 __vbaI2Str ord608 ord716 __vbaFPException ord717 __vbaInStrVar __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaGetOwner4 __vbaVarCat ord535 __vbaDateVar __vbaI2Var ord537 __vbaFileSeek ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec __vbaR8Str __vbaVarLateMemCallLdRf __vbaInStr ord648 ord570 __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj ord573 __vbaStrCopy ord681 __vbaI4Str __vbaVarCmpLt __vbaVarNot __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaLateMemCall __vbaAryLock __vbaFreeVarg __vbaVarDup __vbaStrToAnsi __vbaFpI2 __vbaVarMod ord616 __vbaVarTstGe __vbaVarLateMemCallLd __vbaFpI4 __vbaVarCopy __vbaVarSetObjAddref __vbaLateMemCallLd ord617 __vbaRecDestructAnsi _CIatan __vbaAryCopy __vbaI2ErrVar ord540 __vbaUI1Str __vbaStrMove __vbaCastObj __vbaForEachVar __vbaStrVarCopy ord619 ord542 ord543 _allmul __vbaLenVarB ord544 __vbaLateIdSt __vbaLateMemCallSt ord545 _CItan ord546 __vbaFPInt __vbaUI1Var ord547 __vbaAryUnlock __vbaVarForNext _CIexp __vbaRecAssign __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

5a74691da6edf0a49f5e0d0208be7e7fe17e0d4f91bb3cb6aed1b9b727e1a81d

msvbvm60

generic