a59d604f68d17572e8277dd461af942f

General

Target
a59d604f68d17572e8277dd461af942f
Size 130KB
Sample240226-gs3swaef68
SHA256 6b1c48540d967dce47807f8bb93a23414c0ae44f81857adc241648a578bc0bbe
MD5 a59d604f68d17572e8277dd461af942f
SHA1 a94d25d8c59251cb00b8b2d7746213b0f146571d
SHA512 6223e37871c4fed694d2153ff3e032d6f143a1b15cffd10190543dd8b3ec4259ee4eceaddc40d6926bb4837c92edf8c0e9f10948efc038cfe6525066e7b4eacd
SSDEEP 1536:zPR0BFCHDTY08s3i80BQfYEpCHD13zXpdyz8qyoYQqw9PBZueu0An2aV+NVi1vRn:oN0jpc3FQz5PyeX2V+VQRBKLaOZV+n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59d604f68d17572e8277dd461af942f

File Explorer

a59d604f68d17572e8277dd461af942f

.exe 130KB

a59d604f68d17572e8277dd461af942f

IMPHASH e091eb6ba348e5aa98fce8f71736b8ff
SHA256 6b1c48540d967dce47807f8bb93a23414c0ae44f81857adc241648a578bc0bbe
MD5 a59d604f68d17572e8277dd461af942f
SHA1 a94d25d8c59251cb00b8b2d7746213b0f146571d
SHA512 6223e37871c4fed694d2153ff3e032d6f143a1b15cffd10190543dd8b3ec4259ee4eceaddc40d6926bb4837c92edf8c0e9f10948efc038cfe6525066e7b4eacd
SSDEEP 1536:zPR0BFCHDTY08s3i80BQfYEpCHD13zXpdyz8qyoYQqw9PBZueu0An2aV+NVi1vRn:oN0jpc3FQz5PyeX2V+VQRBKLaOZV+n
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5180

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaOnError _adj_fdiv_m16i _adj_fdivr_m16i __vbaVarIndexLoad _CIsin __vbaErase ord631 __vbaVarZero ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaGet3 __vbaAryConstruct2 __vbaI2I4 DllFunctionCall _adj_fpatan __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaFPException ord717 __vbaUbound __vbaStrVarVal ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 ord570 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaAryLock __vbaStrToAnsi ord616 __vbaFpI4 _CIatan __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

a59d604f68d17572e8277dd461af942f

msvbvm60

generic