063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48

General

Target
063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48
Size 2.4MB
Sample240612-hrzkhatdln
SHA256 063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48
MD5 72af1d83924f4e23035a09211ac76f32
SHA1 8a2851071f7b030b566b39f026b7c4892d97e066
SHA512 8aa3c300e5e3ea854853b76dead8171c617073e7e7bd42430a6dd005059464878b275db8443eabdbb2c91dd02a788d0f8fdfd9e223287d1748809e63c9b49d11
SSDEEP 6144:gRBelNzUoeAjUW/fZX73FK2D69cTxTTo6yL1Jy/B2r833jc/9y63UZi2ruggisC:HNvjzPuJOW833jc/9y6kZZng
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48

File Explorer

063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48

.exe 2.4MB

063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48

IMPHASH 5f6cf3af6aab9b6b454818832e830579
SHA256 063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48
MD5 72af1d83924f4e23035a09211ac76f32
SHA1 8a2851071f7b030b566b39f026b7c4892d97e066
SHA512 8aa3c300e5e3ea854853b76dead8171c617073e7e7bd42430a6dd005059464878b275db8443eabdbb2c91dd02a788d0f8fdfd9e223287d1748809e63c9b49d11
SSDEEP 6144:gRBelNzUoeAjUW/fZX73FK2D69cTxTTo6yL1Jy/B2r833jc/9y63UZi2ruggisC:HNvjzPuJOW833jc/9y6kZZng
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

32316

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 ord690 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 ord621 __vbaNextEachVar __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaRecAnsiToUni ord518 ord626 __vbaResume __vbaForEachCollAd __vbaStrCat __vbaVarCmpNe __vbaWriteFile __vbaLsetFixstr ord660 __vbaRecDestruct __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 ord666 ord667 __vbaAryDestruct __vbaExitProc __vbaObjSet __vbaOnError ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord520 __vbaForEachCollVar __vbaBoolVar __vbaVarTstLt __vbaBoolVarNull _CIsin ord709 ord631 ord632 __vbaVarCmpGt __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp ord529 __vbaVarTstEq ord560 __vbaObjVar __vbaI2I4 ord561 __vbaNextEachCollVar DllFunctionCall __vbaVarOr __vbaCastObjVar _adj_fpatan __vbaLateIdCallLd __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 _CIsqrt __vbaVarAnd EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode __vbaPrintFile ord605 ord606 _adj_fprem _adj_fdivr_m64 ord607 ord608 ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat __vbaDateVar ord535 __vbaI2Var ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaInStr __vbaNew2 ord648 ord570 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaVarSetVar __vbaI4Var ord689 __vbaVarCmpEq ord610 __vbaAryLock __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup ord616 __vbaVarLateMemCallLd __vbaVarCopy __vbaRecDestructAnsi ord617 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaCastObj ord619 __vbaStrVarCopy __vbaForEachVar _allmul __vbaLateIdSt _CItan __vbaNextEachCollAd ord546 __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

063f60a207c01567aaa3cb2d4eb44de342fb6848720d1ee3cfa38ef42dc4fe48

msvbvm60

generic