560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea

General

Target
560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea
Size 76KB
Sample241109-2a3elstell
SHA256 560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea
MD5 5dd6cf9394bf425eaf924a8ab168b15e
SHA1 5932f89a082a376cf2cd8187d04541dfeb39623f
SHA512 be3d845516a96524a1789cb0048dcf40c7d9c535c164fbcf3bf4c430c739a7ce58b9f9bcf3801608ddc98a1da7cfb23aaec918474007504be3cb6513dd0c62da
SSDEEP 1536:MvP69lUyW1UwzJmWRaD1gXI7uMrpzrnacxfzZ1:G69lU2UmWVXI7uMlzTFz7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea

File Explorer

560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea

.exe 76KB

560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea

IMPHASH d49252bf1c5788103af37733a1ee972e
SHA256 560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea
MD5 5dd6cf9394bf425eaf924a8ab168b15e
SHA1 5932f89a082a376cf2cd8187d04541dfeb39623f
SHA512 be3d845516a96524a1789cb0048dcf40c7d9c535c164fbcf3bf4c430c739a7ce58b9f9bcf3801608ddc98a1da7cfb23aaec918474007504be3cb6513dd0c62da
SSDEEP 1536:MvP69lUyW1UwzJmWRaD1gXI7uMrpzrnacxfzZ1:G69lU2UmWVXI7uMlzTFz7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5404

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub ord583 _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaFreeVar __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaVarIndexStore __vbaFreeObjList _adj_fprem1 ord628 __vbaStrCat __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaForEachCollObj __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i __vbaRefVarAry _CIsin __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaR4Str DllFunctionCall __vbaRedimPreserve _adj_fpatan __vbaLateIdCallLd __vbaStrR8 __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaRedimVar EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 __vbaI2Str __vbaFailedFriend __vbaVarDiv __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat _CIlog __vbaErrorOverflow __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaI4Var __vbaVarAdd __vbaAryLock __vbaVarDup __vbaStrToAnsi __vbaFpI4 _CIatan __vbaStrMove __vbaStrVarCopy _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp ord580 __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

560085d5289231751e3ae4cb95b020cec5cda5a65caddbce712c347b496488ea

msvbvm60

generic