24776324204[.]zip | Triage™

Resubmissions

17/04/2026, 00:57

260417-bazevags8x10

15/04/2026, 01:17

15/04/2026, 01:12

15/04/2026, 00:51

30/03/2026, 07:17

Sharing

Copy URL Twitter E-mail

General

Target
24776324204.zip
Size 263KB
Sample260417-bazevags8x
SHA256 d12d1a5b02ead7232abfab2f443568e63c3ef00ceabd949e4d8567dffbcb1a80
MD5 48e5a5a7b307c09de2e61ab4736f7005
SHA1 af8247f2e23b80e3a75924682b469f5da6ed7dfc
SHA512 bd08ae6e1ee1a8ec486fbe93dc520e80f97c37f74bcece72373c28caf70aeeaf4013aa5957e0973198a695039844f7d0c5aad3e4c1c92804f07e88728bc27b59
SSDEEP 6144:3nrjwgOa/NMpv/F9sQuckTRMai3Xh4lxef:3ga/KpnvMxTRli3yzw
TLSH
T1EA4423BBE1E895C9515D299C09595A24337DCF8049DD67F736EEC0FB28C3230392A867
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/005ce041948cce1950e2888c100580851e10a50ad4ff0e534ea3884bfad2d7cd

File Explorer

24776324204.zip

.zip 263KB
005ce041948cce1950e2888c100580851e10a50ad4ff0e534ea3884bfad2d7cd

.exe 328KB

24776324204.zip

SHA256 d12d1a5b02ead7232abfab2f443568e63c3ef00ceabd949e4d8567dffbcb1a80
MD5 48e5a5a7b307c09de2e61ab4736f7005
SHA1 af8247f2e23b80e3a75924682b469f5da6ed7dfc
SHA512 bd08ae6e1ee1a8ec486fbe93dc520e80f97c37f74bcece72373c28caf70aeeaf4013aa5957e0973198a695039844f7d0c5aad3e4c1c92804f07e88728bc27b59
SSDEEP 6144:3nrjwgOa/NMpv/F9sQuckTRMai3Xh4lxef:3ga/KpnvMxTRli3yzw
TLSH
T1EA4423BBE1E895C9515D299C09595A24337DCF8049DD67F736EEC0FB28C3230392A867
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

005ce041948cce1950e2888c100580851e10a50ad4ff0e534ea3884bfad2d7cd

IMPHASH 6125ae9b90abc547def4aac340d5707c
SHA256 005ce041948cce1950e2888c100580851e10a50ad4ff0e534ea3884bfad2d7cd
MD5 fc4118afa84f8aea26419db2016cd2a8
SHA1 f1fd7fbe02c07affa3a2f7df15d4c9747add2603
SHA512 2d78cc76891ad44d7a294ebd4120bb2fcbc04824f807869d68b9f7b61cc60fdc90203a6dbcb1a6415be52d58e0dd4688e5d20e0dd5506a2c912236038481956c
SSDEEP 6144:riEN2nK841d3pAg6SEyLlhFp0l94dLpuoo+Pt3LpFfsBvg5vdHL9:ri3J41HU4Gl9sxNZVR
TLSH
T16A64DF276DAE4063C210C4F1DBE590F66A28EC77F841543FA756BE292B70C831AE3576
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

5804

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord588 __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaExitProc ord593 ord301 __vbaOnError ord595 __vbaCyAdd __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 ord520 __vbaBoolVar ord307 __vbaFpR8 _CIsin ord631 ord632 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaI2I4 DllFunctionCall __vbaCySub __vbaLbound __vbaRedimPreserve _adj_fpatan __vbaR4Var __vbaR8Cy __vbaRedim __vbaStrR8 EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaFPException __vbaUbound __vbaStrVarVal __vbaVarCat _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaAryLock __vbaVarAdd __vbaVarDup ord614 __vbaFpI2 __vbaFpI4 _CIatan __vbaUI1Str __vbaStrMove __vbaR8IntI4 _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeStr __vbaFreeObj