99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a

General

Target
99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a
Size 4.8MB
Sample240613-gbgt3swcmd
SHA256 99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a
MD5 5e6c14b73b7c3af10284d798fccbee73
SHA1 15bdb383c60d79f562f49d3d3c7d67aa8922b3f4
SHA512 73442a93170595e57f7d0e06d6abc395f7e1e9be65c1f160ebff689180696923abe2cf7f43fdc2515db311e7260e7af2324ac52e992fbea026b9ae5e31a43c19
SSDEEP 98304:6g8R8hWjzYtTiSzl9fh+OEA3DgpaUBcHmji9GlS35T0aQVUYONRNMOQNQc0ZjjaS:h8R8hWjzYtTiSzl9fh+OEA3DgpaUBcHD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a

File Explorer

99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a

.exe 4.8MB

99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a

IMPHASH d28b14ad81908b56f4cd687588b61dc6
SHA256 99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a
MD5 5e6c14b73b7c3af10284d798fccbee73
SHA1 15bdb383c60d79f562f49d3d3c7d67aa8922b3f4
SHA512 73442a93170595e57f7d0e06d6abc395f7e1e9be65c1f160ebff689180696923abe2cf7f43fdc2515db311e7260e7af2324ac52e992fbea026b9ae5e31a43c19
SSDEEP 98304:6g8R8hWjzYtTiSzl9fh+OEA3DgpaUBcHmji9GlS35T0aQVUYONRNMOQNQc0ZjjaS:h8R8hWjzYtTiSzl9fh+OEA3DgpaUBcHD
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

89384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaR8FixI4 __vbaVarTstGt __vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree ord693 __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaLineInputStr __vbaLateIdCall ord588 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaNextEachVar __vbaLineInputVar __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 ord626 __vbaI2Abs __vbaResume __vbaCopyBytes __vbaVarCmpNe ord629 __vbaStrCat __vbaError ord552 __vbaCyInt __vbaLsetFixstr ord660 ord553 __vbaStrDate __vbaRecDestruct __vbaSetSystemError ord662 __vbaLenBstrB __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 ord666 __vbaVarTstLe __vbaAryVar Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt __vbaBoolStr __vbaStrBool __vbaVarForInit ord593 __vbaForEachCollObj __vbaExitProc ord300 __vbaI4Abs ord594 ord301 __vbaObjSet ord595 __vbaOnError ord596 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord304 __vbaVarIndexLoad ord598 ord305 __vbaFpR4 ord599 ord306 __vbaForEachCollVar __vbaStrFixstr ord520 __vbaBoolVar ord307 __vbaFPFix ord309 __vbaVargVar __vbaRefVarAry __vbaBoolVarNull __vbaVarTstLt __vbaFpR8 _CIsin __vbaErase ord631 ord709 __vbaVarZero __vbaVargVarMove __vbaLateMemStAd ord632 __vbaVarCmpGt __vbaNextEachCollObj __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaVarAbs ord528 __vbaGenerateBoundsError __vbaExitEachColl __vbaStrCmp ord529 __vbaPutOwner3 __vbaVarTstEq __vbaAryConstruct2 __vbaR4Str ord561 __vbaPrintObj __vbaNextEachCollVar __vbaObjVar __vbaI2I4 DllFunctionCall ord670 __vbaVarOr __vbaVarLateMemSt __vbaCySub __vbaFpUI1 __vbaCastObjVar __vbaLbound __vbaStrR4 __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaR8Cy __vbaRedim __vbaStrR8 __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt ord310 __vbaLateIdCallSt __vbaObjIs __vbaVarAnd ord311 EVENT_SINK_QueryInterface __vbaStrUI1 __vbaUI1I4 __vbaFpCmpCy __vbaVarMul __vbaExceptHandler ord312 ord711 ord313 __vbaStrToUnicode __vbaPrintFile ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend ord607 __vbaVarDiv __vbaI2Str ord608 ord531 ord716 __vbaVarCmpLe __vbaFPException __vbaInStrVar ord717 ord319 __vbaGetOwner3 __vbaStrVarVal __vbaUbound __vbaGetOwner4 __vbaVarCat __vbaDateVar ord536 __vbaLsetFixstrFree __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord570 __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaInStr __vbaNew2 __vbaR8Str ord648 __vbaCyMulI2 ord571 __vbaVarInt _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str ord681 __vbaFreeStrList __vbaVarCmpLt ord576 _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord578 ord685 ord100 ord579 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaFpCy ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall ord320 __vbaStrToAnsi __vbaVarDup ord612 ord321 ord613 __vbaFpI2 __vbaVarMod __vbaVarTstGe ord616 __vbaFpI4 __vbaVarLateMemCallLd __vbaVarCopy __vbaVarSetObjAddref __vbaRecDestructAnsi __vbaR8IntI2 ord617 __vbaLateMemCallLd _CIatan __vbaStrMove __vbaCastObj __vbaAryCopy __vbaI4Cy __vbaForEachVar __vbaStrVarCopy ord619 __vbaR8IntI4 ord542 ord650 ord543 _allmul __vbaVarLateMemCallSt __vbaLenVarB __vbaLateIdSt ord544 ord545 _CItan ord546 __vbaUI1Var __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaRecAssign __vbaR8FixI2 __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

99fa3ec1b21beb15d7e37750a7c0faf322b56ebea06fe32323533afedfa85b3a

msvbvm60

generic