528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N

General

Target
528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N
Size 132KB
Sample241107-nsvktstphn
SHA256 528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840
MD5 eb2ab4c4cba17142738ac70375a65e50
SHA1 5408e57d2c84ef30fa5122dc855c4184fafbc51d
SHA512 2dbea400ee5c91703f0ae90b7a9f6d4065691bf292d32b698c5e0666d0d4da0eedace5184984260d8c5a840a367281bccbc29af96bac4ce45ffdbf91c2875fc9
SSDEEP 1536:bHFjwOqUuflO+6peVdM/d2yv6n0APB8qFE0OSqHW2PYoPPrCLaC46lxIDCwMZODP:ryOqxY+6pejzNB8A4xAo784KmMMDLHb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N

File Explorer

528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N

.exe 132KB

528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N

IMPHASH 77e995ef7dba8f87f5df2745039155fd
SHA256 528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840
MD5 eb2ab4c4cba17142738ac70375a65e50
SHA1 5408e57d2c84ef30fa5122dc855c4184fafbc51d
SHA512 2dbea400ee5c91703f0ae90b7a9f6d4065691bf292d32b698c5e0666d0d4da0eedace5184984260d8c5a840a367281bccbc29af96bac4ce45ffdbf91c2875fc9
SSDEEP 1536:bHFjwOqUuflO+6peVdM/d2yv6n0APB8qFE0OSqHW2PYoPPrCLaC46lxIDCwMZODP:ryOqxY+6pejzNB8A4xAo784KmMMDLHb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

_CIcos _adj_fptan ord585 __vbaVarMove __vbaVarVargNofree ord586 __vbaFreeVar __vbaGosubReturn __vbaEnd __vbaFreeVarList _adj_fdiv_m64 ord512 __vbaVarIndexStore _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj ord558 _adj_fdiv_m32 __vbaAryDestruct ord594 __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaRefVarAry _CIsin ord631 __vbaChkstk __vbaGosubFree EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaCyI2 __vbaStrCmp __vbaAryConstruct2 DllFunctionCall __vbaCySub __vbaFpUI1 ord672 __vbaRedimPreserve __vbaLbound ord673 _adj_fpatan __vbaRedim __vbaCyUI1 __vbaUI1Cy EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaRedimVar EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaGosub __vbaFPException __vbaUbound __vbaStrVarVal ord538 _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 _CIatan __vbaStrMove __vbaStrVarCopy _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

528043dff4c06d5409423beec1a7af3355c5011de6b0f6a4106bd359d28ae840N

msvbvm60

generic