cc12fea61b3e3d36b1c754b521211e22

General

Target
cc12fea61b3e3d36b1c754b521211e22
Size 468KB
Sample240315-wp5kmafc5s
SHA256 10e36b0c5046cc44327bb1d28f5cc27e7b1f6bc595759ecade5d45f4fd6b24bc
MD5 cc12fea61b3e3d36b1c754b521211e22
SHA1 61acf09d0127c43075cddc44de9cd8843e154472
SHA512 21e24d878838d871915feb801f7a120d969bc77e209e4b56fa53c063e32cb701b1180faeb8b357ac3777949564d124b11e2a0098674a5400163518cbc5905c59
SSDEEP 6144:uqlRrlgSCQ7KwUIRdWXxJrtFTJ3zZrOKaIuCrZ5ZYLoL9poeV+f3T+SGnrv/H5BF:tlRr3CJxH398IGypPcvT2rH5f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc12fea61b3e3d36b1c754b521211e22

File Explorer

cc12fea61b3e3d36b1c754b521211e22

.exe 468KB

cc12fea61b3e3d36b1c754b521211e22

IMPHASH 77bd47b39e680f1cd24801dda9b8296c
SHA256 10e36b0c5046cc44327bb1d28f5cc27e7b1f6bc595759ecade5d45f4fd6b24bc
MD5 cc12fea61b3e3d36b1c754b521211e22
SHA1 61acf09d0127c43075cddc44de9cd8843e154472
SHA512 21e24d878838d871915feb801f7a120d969bc77e209e4b56fa53c063e32cb701b1180faeb8b357ac3777949564d124b11e2a0098674a5400163518cbc5905c59
SSDEEP 6144:uqlRrlgSCQ7KwUIRdWXxJrtFTJ3zZrOKaIuCrZ5ZYLoL9poeV+f3T+SGnrv/H5BF:tlRr3CJxH398IGypPcvT2rH5f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaStrI2 ord690 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaLineInputStr __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord516 _adj_fprem1 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj ord665 _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaExitProc ord593 ord594 ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaBoolVarNull _CIsin ord631 __vbaErase ord525 ord632 __vbaVarZero __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaVarOr __vbaCastObjVar __vbaLbound _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim __vbaUI1ErrVar EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaLateIdStAd __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaLsetFixstrFree ord537 ord644 ord645 _CIlog __vbaFileOpen __vbaVar2Vec ord648 __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe ord689 __vbaVarCmpEq __vbaVarAdd __vbaAryLock __vbaStrToAnsi __vbaVarDup __vbaVerifyVarObj ord616 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaR8IntI4 ord650 _allmul __vbaLateIdSt _CItan __vbaAryUnlock _CIexp __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

cc12fea61b3e3d36b1c754b521211e22

msvbvm60

generic