ec404fb07fe2533e944bc1374128682474e7cce4419d4c3af04ae7565246d301

Sharing

Copy URL Twitter E-mail

General

Target

ec404fb07fe2533e944bc1374128682474e7cce4419d4c3af04ae7565246d301
Size

580KB
MD5

f77b06dd301bd1ab5b6a194a1104b0ab
SHA1

54058e772c876e0dbf07f28f784f980c7fec4ffc
SHA256

ec404fb07fe2533e944bc1374128682474e7cce4419d4c3af04ae7565246d301
SHA512

44adb05a1ee6582fd1e7efbb28b6e6ec871827c1105eb7d050e9ce7964fb4720c770375c903dc5a6498b222de08c80254f41c095dfbfe1b09c295bc566f1db20
SSDEEP

384:YD83cNFunYpaNHW1VOBjvrrNjCbTRd6Mkd2ttK5oi8+oS+mrcuTrFDw0XDjWyQ:q83cvNpc2rOBjLcUC+oSOudt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec404fb07fe2533e944bc1374128682474e7cce4419d4c3af04ae7565246d301

Files

ec404fb07fe2533e944bc1374128682474e7cce4419d4c3af04ae7565246d301
.exe windows:4 windows x86 arch:x86

6d0d459d9e97aa506c7a33d4cc83892c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaLateIdCall
ord588
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
ord513
__vbaFreeObjList
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaForEachCollAd
__vbaStrCat
ord660
__vbaRecDestruct
__vbaSetSystemError
ord662
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
__vbaAryVar
__vbaAryDestruct
ord591
__vbaLateMemSt
__vbaVarForInit
__vbaExitProc
ord300
__vbaObjSet
__vbaOnError
ord595
ord302
ord596
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord306
ord520
ord308
ord309
__vbaFpR8
__vbaBoolVarNull
_CIsin
ord709
__vbaVarZero
ord632
__vbaChkstk
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaExitEachColl
ord529
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaDateR8
ord560
__vbaVarLikeVar
__vbaObjVar
__vbaPrintObj
__vbaI2I4
DllFunctionCall
__vbaVarLateMemSt
__vbaVarOr
ord670
__vbaCastObjVar
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaStrR8
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
ord600
_CIsqrt
__vbaVarAnd
__vbaLateIdCallSt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
__vbaStrToUnicode
ord713
_adj_fprem
_adj_fdivr_m64
__vbaLateIdStAd
__vbaI2Str
ord608
ord716
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaDateVar
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaVarLateMemCallLdRf
__vbaInStr
__vbaNew2
_adj_fdiv_m32i
ord681
ord576
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
ord610
__vbaLateMemCall
__vbaVarAdd
__vbaAryLock
__vbaFreeVarg
__vbaStrToAnsi
__vbaVarDup
__vbaVerifyVarObj
ord613
__vbaVarTstGe
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaFpI4
__vbaRec
ord617
ord619
ord546
ord581

Sections

.text
Size: 568KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d0d459d9e97aa506c7a33d4cc83892c

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 568KB - Virtual size: 564KB

.data Size: 4KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 568KB - Virtual size: 564KB

.data
Size: 4KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 1KB