6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f

General

Target
6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f
Size 140KB
Sample240610-24jvcsvdnn
SHA256 6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f
MD5 cee51a49606504a744de9655bd072382
SHA1 1b1a9297356b15bc59e2d779c2d467317a8486da
SHA512 6a93351b8871bbd78c54862f040eb5e48f153e8ad694bc9bf71fd7aca8a0f2cfb0cf7de4ab32ab71583dc001695a6abe0234a2e8992b00cf165772841e1d84ac
SSDEEP 3072:/MXdTLgDKdoS89cuu7WiBg4BSLiTruPSa/S5:/MXdTLg+oS2cl7FBsLLPS/5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f

File Explorer

6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f

.exe 140KB

6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f

IMPHASH 9d179117d684845722a9bc95da16d6ee
SHA256 6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f
MD5 cee51a49606504a744de9655bd072382
SHA1 1b1a9297356b15bc59e2d779c2d467317a8486da
SHA512 6a93351b8871bbd78c54862f040eb5e48f153e8ad694bc9bf71fd7aca8a0f2cfb0cf7de4ab32ab71583dc001695a6abe0234a2e8992b00cf165772841e1d84ac
SSDEEP 3072:/MXdTLgDKdoS89cuu7WiBg4BSLiTruPSa/S5:/MXdTLg+oS2cl7FBsLLPS/5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub ord690 ord691 _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord520 __vbaBoolVarNull __vbaVarTstLt _CIsin ord632 __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaObjVar DllFunctionCall _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord608 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarCmpLt _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 ord610 __vbaLateMemCall __vbaStrToAnsi __vbaVarSetObjAddref _CIatan __vbaStrMove __vbaCastObj _allmul _CItan _CIexp ord580 __vbaFreeObj __vbaFreeStr

Sharing

General

Malware Config

Signatures

File Explorer

6afe66b76352aa0be096113bb40cac83bf8335902a23bf90ba5a67f618f3c03f

msvbvm60

generic