305143d2b8d9db9b0a0dfa7816ecf18bf1b72ae032b608cc630ec4a39f9adcf9

General

Target

305143d2b8d9db9b0a0dfa7816ecf18bf1b72ae032b608cc630ec4a39f9adcf9
Size

5.9MB
MD5

3b0063ea29235b7ebac23ec2c84a5979
SHA1

7dcbe6a127a5822eb044f1b5d384f20b06af85aa
SHA256

305143d2b8d9db9b0a0dfa7816ecf18bf1b72ae032b608cc630ec4a39f9adcf9
SHA512

ec385e15ca5c452059882653c6474e06e982ab120047dbb759e10ee4e23cd188e49df0b59233d30f86fd3d1a4da49b6eb971ae44903c4d879c4ab0477e91c0ea
SSDEEP

98304:H95sywWkAq5NVUWQLeXbjJ+bK9OrXGtoiiokx+7rDlQJ2hv+Sm:H9505NVmerjIitoNx+PDWQvHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305143d2b8d9db9b0a0dfa7816ecf18bf1b72ae032b608cc630ec4a39f9adcf9

Files

305143d2b8d9db9b0a0dfa7816ecf18bf1b72ae032b608cc630ec4a39f9adcf9
.exe windows:4 windows x86 arch:x86

8bf5647ac17d048301a655b90d75b33b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx

user32

wsprintfA

shlwapi

ord158

msvbvm60

__vbaVarSub

Sections

.text
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.virbox
Size: - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdata0
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdata1
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.virbox3
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bf5647ac17d048301a655b90d75b33b

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

msvbvm60

Sections

.text Size: - Virtual size: 4.2MB

.data Size: - Virtual size: 34KB

.virbox Size: - Virtual size: 149KB

.vdata0 Size: - Virtual size: 4.5MB

.vdata1 Size: - Virtual size: 13KB

.virbox3 Size: 216KB - Virtual size: 215KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: - Virtual size: 4.2MB

.data
Size: - Virtual size: 34KB

.virbox
Size: - Virtual size: 149KB

.vdata0
Size: - Virtual size: 4.5MB

.vdata1
Size: - Virtual size: 13KB

.virbox3
Size: 216KB - Virtual size: 215KB

.rsrc
Size: 4KB - Virtual size: 1KB