bfbb5319d43343480ecc28bc48c1f1a0

Sharing

Copy URL

Twitter E-mail

General

Target

bfbb5319d43343480ecc28bc48c1f1a0
Size

268KB
MD5

bfbb5319d43343480ecc28bc48c1f1a0
SHA1

13336d432cd9a3b928f5d09c94110aabf015cc0a
SHA256

76df8f31250a9cfb3ae0632f9cd8f01ca579ffd26f45816c86fc2ce0a7293b70
SHA512

68eee3af8dab7e8bc84cdb110a2167001a9babc85195a51571b60b8476495247969600760df08fe38a9eb5db89245543b3646511a657b7ea3945c5c1b1e1d8a3
SSDEEP

3072:SHDmEharHTaza1/nSaTaz12CHtKpJLY6oxAlkdOnOLylTVgbj/FDK9+MhLx:yyLrznSQGZcJ0dds7lTc/Fu+w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfbb5319d43343480ecc28bc48c1f1a0

Files

bfbb5319d43343480ecc28bc48c1f1a0
.exe windows:4 windows x86 arch:x86

6ad00816c3a61f05c4d45d5ed2d3c799

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

__vbaVarTextTstLe
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLineInputStr
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
ord516
__vbaVarTextTstLt
__vbaStrErrVarCopy
_adj_fprem1
ord625
ord518
__vbaRecAnsiToUni
ord626
__vbaVarTextCmpGt
ord519
__vbaResume
__vbaForEachCollAd
__vbaStrCat
__vbaLsetFixstr
__vbaCyInt
__vbaVarTextTstEq
__vbaRecDestruct
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
ord558
__vbaVargVarCopy
_adj_fdiv_m32
__vbaAryDestruct
ord591
__vbaLateMemSt
ord592
__vbaForEachCollObj
__vbaExitProc
__vbaI4Abs
__vbaFileCloseAll
ord595
__vbaCyAdd
__vbaOnError
__vbaObjSet
__vbaVargObj
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord304
ord598
__vbaFpR4
__vbaBoolVar
__vbaStrFixstr
ord520
__vbaStrTextCmp
ord309
__vbaVargVar
__vbaBoolVarNull
__vbaFpR8
_CIsin
ord631
__vbaErase
ord524
__vbaVargVarMove
ord525
__vbaNextEachCollObj
ord632
__vbaChkstk
__vbaFileClose
ord526
__vbaI2Cy
__vbaCyVar
EVENT_SINK_AddRef
ord528
__vbaGenerateBoundsError
ord529
ord560
__vbaPrintObj
__vbaObjVar
__vbaI2I4
ord561
DllFunctionCall
__vbaVarOr
ord563
__vbaAryConstruct
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaLateIdCallLd
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
__vbaVarTextTstNe
_CIsqrt
ord310
__vbaVarAnd
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaVarTextCmpEq
__vbaVarMul
__vbaExceptHandler
ord312
__vbaStrToUnicode
__vbaPrintFile
ord606
_adj_fprem
_adj_fdivr_m64
ord607
__vbaR8ErrVar
__vbaI2Str
__vbaVarDiv
ord608
ord531
__vbaFPException
__vbaInStrVar
__vbaVarTextTstGe
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaCheckType
ord535
__vbaI2Var
__vbaLateMemNamedCallLd
ord537
ord645
_CIlog
ord646
__vbaErrorOverflow
__vbaFileOpen
__vbaR8Str
__vbaNew2
ord648
__vbaInStr
__vbaVarInt
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaVarNot
__vbaFreeStrList
__vbaVarTextTstGt
ord576
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarSetVar
__vbaI4Var
__vbaFpCy
__vbaLateMemCall
__vbaAryLock
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
__vbaFpI2
ord616
__vbaFpI4
__vbaVarCopy
__vbaRecDestructAnsi
__vbaLateMemCallLd
__vbaR8IntI2
ord617
_CIatan
__vbaI2ErrVar
ord618
__vbaStrMove
__vbaCastObj
__vbaStrVarCopy
ord619
ord650
_allmul
__vbaLateIdSt
ord651
ord652
__vbaVarTextCmpNe
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
__vbaI4ErrVar

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jirrosd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad00816c3a61f05c4d45d5ed2d3c799

Headers

File Characteristics

Imports

msvbvm50

Sections

.text Size: 155KB - Virtual size: 155KB

.data Size: 512B - Virtual size: 7KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 101KB - Virtual size: 102KB

jirrosd Size: - Virtual size: 4KB

.text
Size: 155KB - Virtual size: 155KB

.data
Size: 512B - Virtual size: 7KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 101KB - Virtual size: 102KB

jirrosd
Size: - Virtual size: 4KB