afb2547a6a546a00e640e6ad45594247

General

Target
afb2547a6a546a00e640e6ad45594247
Size 351KB
Sample240229-211cyafd88
SHA256 799bc643cfd5b436e6226d5c42e3bef2cae2a4dcd5839924acfcd10fd403036b
MD5 afb2547a6a546a00e640e6ad45594247
SHA1 fa5bde5996e5108a45d3d5a22d9c17acdad08264
SHA512 8abfbb256d8b78bdb4e2046996c8a589062e416cd32935642bde463acbe341e0582ded3dffb9fe736875ea62bcb1f42e1996156e1af7cbea36d2bebf8047115c
SSDEEP 3072:PrMUbMvKPFqJHOULc5kAVerPSfa+S1b7ziXFFJyiyO9BeBg5LfhVGjkVBw/TMGZT:j8a/S1OzJ7DDfhVGGIzxpXkIdZr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afb2547a6a546a00e640e6ad45594247

File Explorer

afb2547a6a546a00e640e6ad45594247

.exe 351KB

afb2547a6a546a00e640e6ad45594247

IMPHASH 1e12b33d8d5e90f326ba2a7a2603905d
SHA256 799bc643cfd5b436e6226d5c42e3bef2cae2a4dcd5839924acfcd10fd403036b
MD5 afb2547a6a546a00e640e6ad45594247
SHA1 fa5bde5996e5108a45d3d5a22d9c17acdad08264
SHA512 8abfbb256d8b78bdb4e2046996c8a589062e416cd32935642bde463acbe341e0582ded3dffb9fe736875ea62bcb1f42e1996156e1af7cbea36d2bebf8047115c
SSDEEP 3072:PrMUbMvKPFqJHOULc5kAVerPSfa+S1b7ziXFFJyiyO9BeBg5LfhVGjkVBw/TMGZT:j8a/S1OzJ7DDfhVGGIzxpXkIdZr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub ord690 __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaNextEachVar __vbaFreeObjList __vbaGetFxStr3 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaBoolErrVar __vbaRecDestruct __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct ord669 __vbaBoolStr __vbaStrBool ord593 ord595 __vbaObjSet __vbaOnError _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord521 __vbaStrTextCmp __vbaRefVarAry __vbaFpR8 _CIsin ord631 ord709 __vbaErase ord632 __vbaVarZero __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord529 __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaObjVar ord561 DllFunctionCall __vbaStrR4 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaStrR8 __vbaRedim __vbaRecUniToAnsi __vbaUI1ErrVar EVENT_SINK_Release __vbaNew ord601 _CIsqrt EVENT_SINK_QueryInterface ord710 __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord714 __vbaFailedFriend ord607 ord530 ord608 ord716 ord531 __vbaFPException ord717 ord319 __vbaStrVarVal __vbaUbound ord534 __vbaVarCat __vbaLsetFixstrFree ord537 __vbaFileSeek ord644 ord645 _CIlog __vbaFileOpen ord648 ord570 __vbaR8Str __vbaInStr __vbaNew2 __vbaVar2Vec _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 ord579 __vbaI4Var ord689 __vbaAryLock __vbaVarAdd ord320 __vbaStrComp __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI2 __vbaVarLateMemCallLd __vbaVarTstGe __vbaFpI4 ord616 __vbaVarCopy ord617 __vbaR8IntI2 __vbaRecDestructAnsi __vbaLateMemCallLd _CIatan __vbaUI1Str __vbaCastObj ord618 __vbaAryCopy __vbaStrMove __vbaForEachVar ord650 _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

afb2547a6a546a00e640e6ad45594247

msvbvm60

generic