309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee

General

Target
309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee
Size 640KB
Sample260708-mdcwsset31
SHA256 309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee
MD5 b492fc45f5728c034bbd08f9a067dffb
SHA1 eaf37005760581dfeee103b975fd0720cdd241a7
SHA512 a8e7a5a693fb8de6f4d059bac84d569cffa8b2bcbae6da70759c768249232d06e5d557bf14d3df282f8a5c2f9e29ef1895799d7604e215801cacd5a7aadb08f8
SSDEEP 12288:76n/IZyJVDBVBH2rT0ybMOWgizYQR+86wPpDLb+7PvE87sfA63r:dY7B4UHEwPpDLb+7PvE87sfA63r
TLSH
T185D43B17B650F00ED113C0F16F68E56AA919BE360294990FB280BF4625B6BD35CF672F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee

File Explorer

309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee

.exe 640KB

309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee

IMPHASH dc8d34b990b26a8a008fb309b885f761
SHA256 309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee
MD5 b492fc45f5728c034bbd08f9a067dffb
SHA1 eaf37005760581dfeee103b975fd0720cdd241a7
SHA512 a8e7a5a693fb8de6f4d059bac84d569cffa8b2bcbae6da70759c768249232d06e5d557bf14d3df282f8a5c2f9e29ef1895799d7604e215801cacd5a7aadb08f8
SSDEEP 12288:76n/IZyJVDBVBH2rT0ybMOWgizYQR+86wPpDLb+7PvE87sfA63r:dY7B4UHEwPpDLb+7PvE87sfA63r
TLSH
T185D43B17B650F00ED113C0F16F68E56AA919BE360294990FB280BF4625B6BD35CF672F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub __vbaVarTstGt ord690 __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 ord585 __vbaVarMove __vbaAryMove __vbaCyMul __vbaFreeVar __vbaLateIdCall __vbaLenBstr __vbaStrVarMove ord588 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaPut4 __vbaRaiseEvent __vbaFreeObjList ord516 ord517 _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaCopyBytes __vbaForEachCollAd __vbaVarCmpNe __vbaStrCat __vbaError ord660 ord553 __vbaLsetFixstr __vbaRecDestruct __vbaSetSystemError __vbaLenBstrB __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaVarTstLe __vbaAryDestruct __vbaLateMemSt ord591 ord592 ord593 __vbaBoolStr __vbaExitProc ord300 ord594 __vbaFileCloseAll ord595 __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord599 __vbaFpR4 ord306 __vbaStrFixstr ord520 __vbaBoolVar ord523 __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt _CIsin ord709 ord631 ord632 ord525 __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 __vbaCyVar EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError ord529 __vbaStrCmp __vbaGet4 __vbaVarTstEq __vbaAryConstruct2 __vbaCyI4 ord561 __vbaObjVar __vbaI2I4 DllFunctionCall ord563 ord670 __vbaVarOr __vbaVarLateMemSt __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaR4Var __vbaFixstrConstruct __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaLateIdCallSt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler __vbaPrintFile __vbaStrToUnicode ord712 ord606 _adj_fprem _adj_fdivr_m64 ord607 ord714 ord608 ord531 ord716 __vbaFPException ord532 __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat __vbaCheckType __vbaLsetFixstrFree __vbaI2Var ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaInStr __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList ord576 _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq ord689 ord610 __vbaVarAdd __vbaLateMemCall __vbaAryLock ord612 __vbaStrToAnsi __vbaVarDup ord613 __vbaFpI2 __vbaVarCopy __vbaVarLateMemCallLd ord616 __vbaFpI4 __vbaR8IntI2 ord617 __vbaRecDestructAnsi __vbaLateMemCallLd _CIatan __vbaCastObj __vbaStrMove ord619 __vbaStrVarCopy __vbaI4Cy _allmul __vbaLateIdSt __vbaLateMemCallSt ord545 _CItan __vbaNextEachCollAd __vbaFPInt __vbaAryUnlock _CIexp __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

309532b0a58a241f8985f103643e910b6639e729da0b4dc2c2339fecb72b7bee

msvbvm60

generic