b20431991f6e275f248da8f27cc59ba1

General

Target
b20431991f6e275f248da8f27cc59ba1
Size 488KB
Sample240304-nl4vxsha9w
SHA256 3c3b109b1af9de27f987099e80758258435ea12024f52908b3e7d7ad831cd6ac
MD5 b20431991f6e275f248da8f27cc59ba1
SHA1 d699162d192404f5ba17afb4811f7833e616888b
SHA512 e77aa72caa5c7eb05870dd5b746f62471ef950aa5dc1dfc86926d2fcab984ac7373c74c8308aea8850af31e87d5de707791ee6d2258a0355426fdb52e54f0073
SSDEEP 6144:IQsvYmRAf2G7Rt6mkV1XPkmW2WAlaVZ46DuIK0adkeW3Ogp95iMtL19gfBhlce8v:I1vifj2laVy6xnx+AiMteBh65
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b20431991f6e275f248da8f27cc59ba1

File Explorer

b20431991f6e275f248da8f27cc59ba1

.exe 488KB

b20431991f6e275f248da8f27cc59ba1

IMPHASH f5443c6a99158abacd5c164f1611b6eb
SHA256 3c3b109b1af9de27f987099e80758258435ea12024f52908b3e7d7ad831cd6ac
MD5 b20431991f6e275f248da8f27cc59ba1
SHA1 d699162d192404f5ba17afb4811f7833e616888b
SHA512 e77aa72caa5c7eb05870dd5b746f62471ef950aa5dc1dfc86926d2fcab984ac7373c74c8308aea8850af31e87d5de707791ee6d2258a0355426fdb52e54f0073
SSDEEP 6144:IQsvYmRAf2G7Rt6mkV1XPkmW2WAlaVZ46DuIK0adkeW3Ogp95iMtL19gfBhlce8v:I1vifj2laVy6xnx+AiMteBh65
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8444

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaGosubReturn __vbaStrVarMove __vbaLenBstr __vbaVarIdiv __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaRaiseEvent __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni __vbaCopyBytes __vbaStrCat __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct __vbaStrBool __vbaExitProc __vbaVarForInit ord593 ord594 __vbaStrLike __vbaObjSet ord595 __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 ord599 __vbaCyStr ord520 __vbaBoolVar __vbaRefVarAry _CIsin ord709 __vbaErase ord631 ord632 ord525 __vbaVarZero __vbaChkstk __vbaCyVar ord526 __vbaGosubFree __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 ord561 __vbaI2I4 DllFunctionCall __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaStr2Vec __vbaUI1I4 __vbaExceptHandler ord711 __vbaPrintFile __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaGosub ord607 __vbaI2Str ord608 __vbaFPException __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 __vbaInStr __vbaR8Str __vbaNew2 __vbaVar2Vec __vbaCyMulI2 _adj_fdiv_m32i ord572 _adj_fdivr_m32i ord573 __vbaStrCopy ord681 __vbaI4Str __vbaFreeStrList ord576 __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarLateMemCallLd __vbaVarCopy ord616 __vbaFpI4 __vbaLateMemCallLd __vbaRecDestructAnsi ord617 __vbaR8IntI2 _CIatan ord618 __vbaAryCopy __vbaStrMove __vbaI4Cy ord619 __vbaR8IntI4 __vbaStrVarCopy _allmul __vbaFpCSngR4 __vbaLateIdSt _CItan __vbaUI1Var __vbaAryUnlock __vbaFPInt __vbaVarForNext _CIexp __vbaMidStmtBstr __vbaRecAssign ord580 __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

b20431991f6e275f248da8f27cc59ba1

msvbvm60

generic