dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1

General

Target
dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1
Size 136KB
Sample260717-ghphhaft91
SHA256 dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1
MD5 a9a6a3d829718a71fb8be3e54b73cb4f
SHA1 27dc3a3f098af531e0ea5c5222aa24b9ea77b4b1
SHA512 7a97f8474d00fb11cfdddbff95d9761c1d1d59d0bc351b498bae94261251b6502b127ae98221e454e2dc91c8859ed2bc055dd8e1323e649817aec262d95c73b4
SSDEEP 1536:lAbSQ6UYbIMYjoU0Z4Sjex8XcRjCPYs4HPsrhWSmkkfIJ6OvJi2Nxq:ua0jfTKUec92NWFE5iL
TLSH
T186D3C613BAA46226F58B44701C7AC6793D977C3029519D0BA3807F4E28369E3FAB571F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1

File Explorer

dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1

.exe 136KB

dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1

IMPHASH cc9cdecf831201f3c64f5bb347a8810c
SHA256 dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1
MD5 a9a6a3d829718a71fb8be3e54b73cb4f
SHA1 27dc3a3f098af531e0ea5c5222aa24b9ea77b4b1
SHA512 7a97f8474d00fb11cfdddbff95d9761c1d1d59d0bc351b498bae94261251b6502b127ae98221e454e2dc91c8859ed2bc055dd8e1323e649817aec262d95c73b4
SSDEEP 1536:lAbSQ6UYbIMYjoU0Z4Sjex8XcRjCPYs4HPsrhWSmkkfIJ6OvJi2Nxq:ua0jfTKUec92NWFE5iL
TLSH
T186D3C613BAA46226F58B44701C7AC6793D977C3029519D0BA3807F4E28369E3FAB571F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaHresultCheck __vbaVarMove __vbaStrI4 __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord517 _adj_fprem1 ord518 __vbaRecAnsiToUni ord519 __vbaCopyBytes __vbaStrCat __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt __vbaExitProc __vbaForEachCollObj ord300 __vbaOnError __vbaObjSet ord595 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord304 __vbaVarIndexLoad ord306 ord520 __vbaStrFixstr __vbaBoolVarNull _CIsin ord631 ord709 __vbaErase __vbaNextEachCollObj ord632 ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 DllFunctionCall ord564 __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 ord601 __vbaUI1I2 _CIsqrt ord310 __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord312 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord714 ord608 __vbaFPException __vbaStrCompVar __vbaInStrVar ord717 __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 _CIlog __vbaErrorOverflow __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaAryLock __vbaVarAdd __vbaStrComp __vbaStrToAnsi __vbaVarDup ord616 __vbaFpI4 __vbaVarCopy __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj ord619 ord542 _allmul ord545 _CItan ord546 __vbaAryUnlock __vbaFpCSngR8 _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

dc6bd3e9c30dca0054a98f3755da62bc1c45b45e9a8da05acde5ba26d11521f1

msvbvm60

generic