b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723

General

Target
b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723
Size 260KB
Sample260812-ffbceswsds
SHA256 b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723
MD5 e4ed327b544be8238dd552739ce4c3e8
SHA1 706a066f98967bc72c394aaf9add5051ba75fa57
SHA512 71d67fb07d4cf57e722738afc79b21f3c14b43e76c201f0d104b8b2f2cd7315a8c0a5cafd1865fab4936f3599c367ef65d72d4c7281f5bdfd8e6ef7123eaf75c
SSDEEP 3072:vRjZHiVAbxlXvdhlgfajPepQHCjpwdNSFAcITKkuwOXl1BSdpbP+S:THKAt9F92pQ6pw3+LnwQ1jS
TLSH
T150441A56A3E0E706E6638AF01B3B46B4069A7D3956D0984BA6CC7F1C36B19D1C732373
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723

File Explorer

b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723

.exe 260KB

b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723

IMPHASH b463430b359aa944382eba8a8dc664bf
SHA256 b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723
MD5 e4ed327b544be8238dd552739ce4c3e8
SHA1 706a066f98967bc72c394aaf9add5051ba75fa57
SHA512 71d67fb07d4cf57e722738afc79b21f3c14b43e76c201f0d104b8b2f2cd7315a8c0a5cafd1865fab4936f3599c367ef65d72d4c7281f5bdfd8e6ef7123eaf75c
SSDEEP 3072:vRjZHiVAbxlXvdhlgfajPepQHCjpwdNSFAcITKkuwOXl1BSdpbP+S:THKAt9F92pQ6pw3+LnwQ1jS
TLSH
T150441A56A3E0E706E6638AF01B3B46B4069A7D3956D0984BA6CC7F1C36B19D1C732373
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12228

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaStrAryToUnicode __vbaHresultCheck __vbaStrI4 __vbaVarMove __vbaStrAryToAnsi __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord517 _adj_fprem1 ord518 __vbaRecAnsiToUni ord519 __vbaResume __vbaCopyBytes __vbaStrCat __vbaBoolErrVar __vbaLsetFixstr __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryVar __vbaVarXor __vbaAryDestruct __vbaExitProc ord300 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i ord304 __vbaVarIndexLoad ord306 ord520 __vbaStrFixstr __vbaRefVarAry __vbaBoolVarNull _CIsin ord631 ord709 __vbaErase ord632 ord525 __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaAryConstruct2 __vbaVarTstEq __vbaI2I4 DllFunctionCall __vbaVarOr ord564 __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd __vbaRedim __vbaUI1ErrVar __vbaRecUniToAnsi EVENT_SINK_Release ord601 __vbaUI1I2 _CIsqrt ord310 __vbaVarAnd EVENT_SINK_QueryInterface __vbaVarMul __vbaExceptHandler ord312 ord711 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaR8ErrVar ord714 ord608 __vbaFPException __vbaStrCompVar ord717 __vbaInStrVar __vbaUbound __vbaStrVarVal __vbaVarCat ord537 ord644 ord645 _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaInStr __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord681 __vbaFreeStrList __vbaDerefAry1 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd __vbaVarDup __vbaStrComp __vbaStrToAnsi __vbaFpI4 ord616 __vbaVarCopy ord617 _CIatan __vbaAryCopy __vbaStrMove __vbaCastObj ord618 __vbaStrVarCopy __vbaR8IntI4 ord619 ord542 _allmul ord545 _CItan ord546 __vbaAryUnlock __vbaFpCSngR8 _CIexp __vbaMidStmtBstr __vbaI4ErrVar __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

b335c0afb1e6cb7f106f2f89499694c47062c293c5bfef14759cf56f88373723

msvbvm60

generic