15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e

General

Target
15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e
Size 164KB
Sample240526-xnavashb94
SHA256 15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e
MD5 a6e39cb059be481db8829bac69eff320
SHA1 11760477c9b17f0be2f08d61e08649f40211cb3b
SHA512 3a82187d75ecba2cd9d7d51d7cff272f0a1a8188ad3c4195e821c053fb7eda66506babe9bd25da27fd6315356ca2e24fa7061122a34703f9198d0a135a3630e1
SSDEEP 3072:Ax/zF/ulxEf0e+protYf3soixGNdQQVlxDZiYWuw1WKt:AxLFQcz+hoyEoi4Ndxd4uwI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e

File Explorer

15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e

.exe 164KB

15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e

IMPHASH 135e92fc9902f3140f2e5a51458efdf0
SHA256 15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e
MD5 a6e39cb059be481db8829bac69eff320
SHA1 11760477c9b17f0be2f08d61e08649f40211cb3b
SHA512 3a82187d75ecba2cd9d7d51d7cff272f0a1a8188ad3c4195e821c053fb7eda66506babe9bd25da27fd6315356ca2e24fa7061122a34703f9198d0a135a3630e1
SSDEEP 3072:Ax/zF/ulxEf0e+protYf3soixGNdQQVlxDZiYWuw1WKt:AxLFQcz+hoyEoi4Ndxd4uwI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9484

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub __vbaNextEachAry _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd __vbaPut3 _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaCopyBytes __vbaStrCat __vbaVarCmpNe __vbaForEachCollAd __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord667 __vbaVarXor __vbaAryDestruct ord669 __vbaLateMemSt ord593 __vbaExitProc ord594 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaStrFixstr ord520 ord523 __vbaBoolVarNull _CIsin ord631 ord525 ord632 __vbaVarCmpGt __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef ord528 __vbaGet3 __vbaStrCmp ord529 __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaFixstrConstruct __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException __vbaInStrVar ord717 __vbaStrVarVal __vbaVarCat __vbaI2Var ord644 ord537 ord645 _CIlog __vbaFileOpen __vbaNew2 __vbaInStr __vbaVarLateMemCallLdRf _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarNot _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaForEachAry __vbaVarAdd __vbaLateMemCall __vbaStrToAnsi __vbaVarDup __vbaFpI2 __vbaVarMod __vbaFpI4 ord616 __vbaVarLateMemCallLd ord617 __vbaLateMemCallLd _CIatan __vbaStrMove ord618 ord619 __vbaStrVarCopy ord543 _allmul ord544 _CItan ord546 __vbaNextEachCollAd ord547 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

15bfc5842a3351a58cf7daf354e3511da873e44b8c7e26ec95705aa8c5a9662e

msvbvm60

generic