b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda

General

Target
b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda
Size 636KB
Sample260718-ka3lyady2k
SHA256 b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda
MD5 1d802d34196992da7175ab455b1bb7bb
SHA1 782d8d9bc30882794c8b6cadaae2710cff20e839
SHA512 fe585b4f15cc2ab33ba5119c94f2845639e79c9f77a69d655dc6267282d16cb51beecfb9fd51435a112f2eccb2c45cab0533bcf0d7f33c6bd0219d1c78a80f9a
SSDEEP 12288:3ubkcwsEs2gCxg35sU5DhJDhPDhJeiqnSyie2:+YxswnAD3DNDgSyie
TLSH
T1A5D48E17E960A60AE505E0F43A29DA5638096D3660806D97B3CD4F9D3FB06E3ACF531F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda

File Explorer

b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda

.exe 636KB

b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda

IMPHASH 6bcc6fb1cda64804c84452377c4ed4ae
SHA256 b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda
MD5 1d802d34196992da7175ab455b1bb7bb
SHA1 782d8d9bc30882794c8b6cadaae2710cff20e839
SHA512 fe585b4f15cc2ab33ba5119c94f2845639e79c9f77a69d655dc6267282d16cb51beecfb9fd51435a112f2eccb2c45cab0533bcf0d7f33c6bd0219d1c78a80f9a
SSDEEP 12288:3ubkcwsEs2gCxg35sU5DhJDhPDhJeiqnSyie2:+YxswnAD3DNDgSyie
TLSH
T1A5D48E17E960A60AE505E0F43A29DA5638096D3660806D97B3CD4F9D3FB06E3ACF531F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10520

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt __vbaStrI2 ord690 _CIcos _adj_fptan __vbaVarMove __vbaStrI4 __vbaFreeVar __vbaLateIdCall __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaVarIdiv __vbaEnd _adj_fdiv_m64 EVENT_SINK_Invoke __vbaFreeObjList ord516 __vbaStrErrVarCopy _adj_fprem1 __vbaResume __vbaStrCat ord552 ord660 __vbaWriteFile ord553 __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 Zombie_GetTypeInfo __vbaAryDestruct __vbaVarForInit ord593 __vbaExitProc ord300 ord594 __vbaObjSet __vbaOnError ord595 ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord598 ord306 __vbaBoolVar ord520 __vbaFpR8 __vbaVarTstLt _CIsin ord632 __vbaChkstk __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError ord528 __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaR4Str __vbaObjVar __vbaI2I4 __vbaPrintObj ord561 DllFunctionCall __vbaVarLateMemSt __vbaFpUI1 __vbaStrR4 _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaRedim EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaStrUI1 __vbaExceptHandler __vbaInputFile _adj_fprem _adj_fdivr_m64 __vbaI2Str __vbaVarDiv ord714 ord608 ord531 __vbaFPException __vbaInStrVar ord319 __vbaStrVarVal __vbaGetOwner3 __vbaUbound __vbaI2Var ord644 ord537 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaVarLateMemCallLdRf ord648 __vbaR8Str __vbaVarInt ord571 _adj_fdiv_m32i _adj_fdivr_m32i ord573 __vbaStrCopy __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord578 ord100 __vbaVarTstNe __vbaI4Var ord689 __vbaVarAdd __vbaLateMemCall __vbaAryLock ord320 __vbaVarDup __vbaStrToAnsi ord321 ord613 __vbaVarMod __vbaVarLateMemCallLd __vbaVarCopy ord617 _CIatan __vbaStrMove ord619 __vbaR8IntI4 ord542 ord543 _allmul __vbaLateIdSt ord651 ord544 ord652 ord545 _CItan ord546 __vbaUI1Var __vbaFPInt ord547 __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

b396f985156e9e4a752c2687ade8ffc0ff68da8b415f333c9707e3fde6d60dda

msvbvm60

generic