4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516

General

Target
4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516
Size 12.1MB
Sample260809-lkfetshg76
SHA256 4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516
MD5 5ef4814a99a0344b4ebe7ff79f444db1
SHA1 fad019dbd72521a40db046f2092d99b96e198799
SHA512 390e7f4ea6fc30b313dffb631921dd5ad7b3cec3c83cda73eb2a121a2aa088776de70e7d356208627ad50af1abecb0e51ff0e012aef05194dc8de93b25b7ac98
SSDEEP 196608:PNTN+rXNeNzDN5s5BNAMWluuSpJihu+wIk1:PNTNKNeNzDN5s5euuSpJihu+wI
TLSH
T1C7D6F355BE949C01E89DB638D4ECA542CBF32EC11D32052EBBDCD9992F21ADD0CD468B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516

File Explorer

4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516

.exe 12.1MB

4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516

IMPHASH 900f202979f75ea4efba000cb7b84de0
SHA256 4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516
MD5 5ef4814a99a0344b4ebe7ff79f444db1
SHA1 fad019dbd72521a40db046f2092d99b96e198799
SHA512 390e7f4ea6fc30b313dffb631921dd5ad7b3cec3c83cda73eb2a121a2aa088776de70e7d356208627ad50af1abecb0e51ff0e012aef05194dc8de93b25b7ac98
SSDEEP 196608:PNTN+rXNeNzDN5s5BNAMWluuSpJihu+wIk1:PNTNKNeNzDN5s5euuSpJihu+wI
TLSH
T1C7D6F355BE949C01E89DB638D4ECA542CBF32EC11D32052EBBDCD9992F21ADD0CD468B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17308

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub ord582 __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaFpCDblR4 __vbaAryMove __vbaFreeVar __vbaLateIdCall __vbaLenBstr ord588 __vbaStrVarMove __vbaEnd __vbaFreeVarList _adj_fdiv_m64 EVENT_SINK_Invoke __vbaRaiseEvent __vbaFreeObjList _adj_fprem1 ord519 __vbaI2Abs __vbaResume __vbaCopyBytes __vbaStrCat ord553 __vbaWriteFile ord660 __vbaSetSystemError __vbaHresultCheckObj ord557 __vbaLenVar _adj_fdiv_m32 __vbaAryVar __vbaVarTstLe Zombie_GetTypeInfo __vbaAryDestruct ord591 __vbaLateMemSt ord593 __vbaBoolStr __vbaForEachCollObj __vbaVarForInit __vbaExitProc __vbaOnError ord595 __vbaObjSet ord596 _adj_fdiv_m16i ord303 __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 ord520 __vbaBoolVar __vbaFPFix ord309 __vbaBoolVarNull __vbaFpR8 _CIsin ord631 ord632 __vbaNextEachCollObj __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaCyI2 __vbaStrCmp __vbaVarTstEq __vbaAryConstruct2 ord560 __vbaR4Str __vbaPrintObj ord561 __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarLateMemSt __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaStrR4 _adj_fpatan __vbaR4Var __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaStrR8 __vbaR8Cy __vbaRedim EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaLateIdCallSt __vbaObjIs __vbaVarAnd EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler ord711 ord712 __vbaInputFile _adj_fprem _adj_fdivr_m64 __vbaLateIdStAd __vbaR8ErrVar __vbaVarDiv __vbaI2Str ord608 ord716 __vbaVarCmpLe __vbaFPException ord319 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat ord534 __vbaCheckType __vbaDateVar __vbaI2Var ord644 ord645 _CIlog __vbaErrorOverflow __vbaFileOpen ord648 ord570 __vbaInStr __vbaR8Str __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaNew2 ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaVarSetObj ord573 __vbaStrCopy __vbaI4Str __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaFpCy ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall ord320 __vbaStrComp ord612 __vbaStrToAnsi __vbaVarDup ord321 __vbaVerifyVarObj ord613 ord614 __vbaFpI2 __vbaVarMod ord616 __vbaVarTstGe __vbaVarLateMemCallLd __vbaFpI4 __vbaVarCopy __vbaLateMemCallLd ord617 _CIatan __vbaAryCopy ord618 __vbaI2ErrVar __vbaUI1Str __vbaCastObj __vbaStrMove __vbaStrVarCopy ord619 ord542 ord543 _allmul ord544 __vbaLateIdSt ord545 _CItan __vbaUI1Var __vbaAryUnlock __vbaFPInt ord547 __vbaVarForNext _CIexp __vbaR8FixI2 __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

4b91036d249d4e37039ae7f5973729896d34cd6c2fc071fcd572d76574da4516

msvbvm60

generic