IMPORTANTDOCUMENT[.]exe

General

Target
IMPORTANTDOCUMENT.exe
Size 234KB
Sample260203-dp89psgz8a
SHA256 dbc31a4c65b7cee1bca3e93df0e2f3573c652a2af20ec93b11d7cd1a737ba2ab
MD5 e03d218324aafdd7127131413c7ed26c
SHA1 c3456352a99d6efc6cc5b7825afad901733b7684
SHA512 774084d3c3f869ed782bdc96be448d408ef9a61dbb1e19865086610fd306d9cca66211124cfe8dc6837fa8b340064008d337594b6ff1751a871aa20a699acda2
SSDEEP 6144:VONUtzGf7E+MhGNUFMQ2lgYY4xw01L6spG3:5zmMMU3P4x17G3
TLSH
T1E2348B39F19EE23FE07549B42C150FEC51F941B8F4C65A0AC2556B3A27B01A2BFBD606
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IMPORTANTDOCUMENT.exe

File Explorer

IMPORTANTDOCUMENT.exe

.exe 234KB

IMPORTANTDOCUMENT.exe

IMPHASH a60e2f996367d3f0f40289c655d2d075
SHA256 dbc31a4c65b7cee1bca3e93df0e2f3573c652a2af20ec93b11d7cd1a737ba2ab
MD5 e03d218324aafdd7127131413c7ed26c
SHA1 c3456352a99d6efc6cc5b7825afad901733b7684
SHA512 774084d3c3f869ed782bdc96be448d408ef9a61dbb1e19865086610fd306d9cca66211124cfe8dc6837fa8b340064008d337594b6ff1751a871aa20a699acda2
SSDEEP 6144:VONUtzGf7E+MhGNUFMQ2lgYY4xw01L6spG3:5zmMMU3P4x17G3
TLSH
T1E2348B39F19EE23FE07549B42C150FEC51F941B8F4C65A0AC2556B3A27B01A2BFBD606
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5268

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaStrI2 _CIcos _adj_fptan __vbaFreeVar __vbaAryMove __vbaLenBstr __vbaStrVarMove __vbaPut3 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar ord666 __vbaAryDestruct ord593 __vbaVarForInit ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 _CIsin __vbaErase ord632 __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGet3 __vbaStrCmp __vbaAryConstruct2 __vbaObjVar DllFunctionCall _adj_fpatan EVENT_SINK_Release ord600 _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler ord711 ord713 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord716 __vbaFPException ord717 __vbaStrVarVal __vbaUbound __vbaVarCat ord535 ord537 _CIlog __vbaFileOpen __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaVarSetVar __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup __vbaFpI4 __vbaVarLateMemCallLd __vbaLateMemCallLd _CIatan __vbaAryCopy __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeObj __vbaFreeStr

Sharing