02092024_1451_Modification_List[.]pif

General

Target
02092024_1451_Modification_List.pif
Size 1.0MB
Sample240902-r76hessflj
SHA256 65e1b5713b271302e96bab80440f744c13c953749562603ea3ee03eda880f9ea
MD5 97cc0e7d7caa3483e4c5e5cff9fbe67e
SHA1 e74e03ad3d8f52ce5858a5e8208343fa04a2b367
SHA512 320b84be5ade8681a0be7bd862dfa1b65f75189cc95967ed586d9efdb3c68a8f243861c399339b42f9688561c2f217a6e9d8e4b2e586a4d4f2f583eca711c357
SSDEEP 24576:OLPskXqS0jFC6LkpzqPskXqS0jFC6LkpzWoKywypSpbYmb93PK/:QJXUJC6LkpzqJXUJC6LkpzEMSNYmpy/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02092024_1451_Modification_List.pif

File Explorer

02092024_1451_Modification_List.pif

.exe 1.0MB

02092024_1451_Modification_List.pif

IMPHASH 67d5cc60f9a80cf612cceb6c4d2f15fe
SHA256 65e1b5713b271302e96bab80440f744c13c953749562603ea3ee03eda880f9ea
MD5 97cc0e7d7caa3483e4c5e5cff9fbe67e
SHA1 e74e03ad3d8f52ce5858a5e8208343fa04a2b367
SHA512 320b84be5ade8681a0be7bd862dfa1b65f75189cc95967ed586d9efdb3c68a8f243861c399339b42f9688561c2f217a6e9d8e4b2e586a4d4f2f583eca711c357
SSDEEP 24576:OLPskXqS0jFC6LkpzqPskXqS0jFC6LkpzWoKywypSpbYmb93PK/:QJXUJC6LkpzqJXUJC6LkpzEMSNYmpy/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

999029

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress VirtualAlloc GetModuleHandleW

msvbvm60

__vbaVarSub ord690 __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaAryMove __vbaLineInputStr __vbaStrVarMove __vbaLenBstr __vbaFreeVarList ord697 _adj_fdiv_m64 ord698 __vbaNextEachVar __vbaFreeObjList _adj_fprem1 ord626 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct ord593 ord594 ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaRefVarAry __vbaBoolVarNull _CIsin ord631 __vbaVargVarMove __vbaVarZero __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 ord633 EVENT_SINK_AddRef ord635 __vbaStrCmp __vbaVarTstEq ord638 DllFunctionCall __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaNew _CIsqrt EVENT_SINK_QueryInterface __vbaStr2Vec __vbaExceptHandler __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord644 ord645 _CIlog __vbaFileOpen ord648 __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord100 __vbaI4Var ord689 __vbaAryLock __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarCopy ord616 __vbaVarLateMemCallLd _CIatan __vbaStrMove __vbaCastObj __vbaR8IntI4 __vbaStrVarCopy __vbaForEachVar _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj

Sharing