b53c22fd20cad0c6ceb6cb8a31d92ec4

General

Target
b53c22fd20cad0c6ceb6cb8a31d92ec4
Size 724KB
Sample240305-vt1lssca7w
SHA256 79add08db6dfebcd867ba55b5a9ca8b2d216f6c0d8377ad30a3f5ed72106642c
MD5 b53c22fd20cad0c6ceb6cb8a31d92ec4
SHA1 4b98aa04058a9c6c32305f44fd1c16edee7fd3b7
SHA512 85aa2aa364174b67227e2b11dd2f0d6c9412fa75b98d849e2e8084e1f0499b8d949ac247e6b474a2ddb705ed1f991f6647f60ab0b597c6e08b30e237657c948b
SSDEEP 12288:9O6fCYDzmVu4bDDq0tENwjo3vyH1QYilUj:9O4CiziDne3c1QYiUj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b53c22fd20cad0c6ceb6cb8a31d92ec4

File Explorer

b53c22fd20cad0c6ceb6cb8a31d92ec4

.exe 724KB

b53c22fd20cad0c6ceb6cb8a31d92ec4

IMPHASH c6553e6b59b026cebfc13a9eb56a3cbc
SHA256 79add08db6dfebcd867ba55b5a9ca8b2d216f6c0d8377ad30a3f5ed72106642c
MD5 b53c22fd20cad0c6ceb6cb8a31d92ec4
SHA1 4b98aa04058a9c6c32305f44fd1c16edee7fd3b7
SHA512 85aa2aa364174b67227e2b11dd2f0d6c9412fa75b98d849e2e8084e1f0499b8d949ac247e6b474a2ddb705ed1f991f6647f60ab0b597c6e08b30e237657c948b
SSDEEP 12288:9O6fCYDzmVu4bDDq0tENwjo3vyH1QYilUj:9O4CiziDne3c1QYiUj
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14412

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove ord588 __vbaLenBstr __vbaStrVarMove __vbaVarIdiv __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList ord516 ord517 _adj_fprem1 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaForEachCollAd __vbaStrCat __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct __vbaStrBool __vbaExitProc __vbaStrLike ord595 __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaStrFixstr __vbaBoolVar __vbaBoolVarNull __vbaRefVarAry _CIsin ord709 ord631 __vbaErase ord525 ord632 __vbaVarZero __vbaChkstk ord526 __vbaCyVar EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaExitEachColl __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 ord561 DllFunctionCall __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord608 __vbaFPException __vbaInStrVar ord717 ord319 __vbaStrVarVal __vbaUbound __vbaVarCat __vbaCheckType __vbaI2Var ord537 ord644 _CIlog __vbaInStr __vbaNew2 __vbaVar2Vec __vbaCyMulI2 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaVarAdd __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 __vbaFpI2 __vbaVarLateMemCallLd __vbaFpI4 ord616 ord617 __vbaLateMemCallLd __vbaRecDestructAnsi _CIatan ord618 __vbaStrMove __vbaCastObj __vbaAryCopy __vbaI4Cy ord619 __vbaStrVarCopy _allmul __vbaFpCSngR4 __vbaLateIdSt _CItan __vbaNextEachCollAd __vbaFPInt __vbaUI1Var __vbaAryUnlock _CIexp __vbaMidStmtBstr __vbaRecAssign __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

b53c22fd20cad0c6ceb6cb8a31d92ec4

msvbvm60

generic