a30b1f5da86094eaf0c46d83da7df988

General

Target

a30b1f5da86094eaf0c46d83da7df988
Size

40KB
MD5

a30b1f5da86094eaf0c46d83da7df988
SHA1

66e1c629f0e645278725b984fa7a38a838c38d10
SHA256

3378c37fd319ac04dd46951227be4bd00a270deac3f40daac7035fb871ba9185
SHA512

a4b74a4afd536cbed43d34dc34c9dca11defbb1f028a50a7612506e5778d82e92d42f4b4b1fe0d0752fb0da3a7f1e969b64979c511bbbb389afa52e1bb9f3656
SSDEEP

384:B4PIlP8tTzSfJ/uuDtFMI5hNwh7BgMiUU42GVouX9P+sQpBR0sXyM:B44k1S7F/5DY1RF76uA9D1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30b1f5da86094eaf0c46d83da7df988

Files

a30b1f5da86094eaf0c46d83da7df988
.exe windows:4 windows x86 arch:x86

de542b3a420a03a6dd7fc4c27b952751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaGosubReturn
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaVarIndexStore
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaRecDestruct
__vbaHresultCheckObj
ord558
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
ord592
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord520
__vbaBoolVarNull
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
__vbaGosubFree
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaObjVar
__vbaI2I4
ord670
__vbaVarLateMemSt
ord563
_adj_fpatan
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
ord601
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
ord319
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarNot
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaLateMemCall
ord320
__vbaVarDup
ord321
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaRecAssign
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de542b3a420a03a6dd7fc4c27b952751

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 28KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 60KB

.text
Size: 28KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 60KB