4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5

General

Target
4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5
Size 1.2MB
Sample260827-q2t2rshr21
SHA256 4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5
MD5 443cfd94deb8e72d4970d1484908b523
SHA1 9bb0c9d81ba9b556c520ea680aedfae35443a2b1
SHA512 ac03a8b6293feeab3c326ce6568d920bd57610fe2a44264d306460e6afdc5405fe4efa49fc7f0d667c0224855f79acf309f7b2cd128c537a9f6ab96827476f9a
SSDEEP 12288:x9pKy9cjGHbATBYzurTPR083jaHQgAirqbQKjBVsP2EQinQbq:xfKy9c4bAT00FBGwOXKFVsDQ2
TLSH
T15E45121BBD074447E20449B145BA02C8787E6C7734E15D2FF788BB4D1A7A89AA4F8E37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5

File Explorer

4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5

.exe 1.2MB

4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5

IMPHASH 0d961b3fef71afead7edd942f9b51e7d
SHA256 4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5
MD5 443cfd94deb8e72d4970d1484908b523
SHA1 9bb0c9d81ba9b556c520ea680aedfae35443a2b1
SHA512 ac03a8b6293feeab3c326ce6568d920bd57610fe2a44264d306460e6afdc5405fe4efa49fc7f0d667c0224855f79acf309f7b2cd128c537a9f6ab96827476f9a
SSDEEP 12288:x9pKy9cjGHbATBYzurTPR083jaHQgAirqbQKjBVsP2EQinQbq:xfKy9c4bAT00FBGwOXKFVsDQ2
TLSH
T15E45121BBD074447E20449B145BA02C8787E6C7734E15D2FF788BB4D1A7A89AA4F8E37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6476

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

\\OFFBLD490\OfficeRW\Target\ACE\x86\ship\0\AceCnflt.pdb

msvbvm60

__vbaVarSub __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarVargNofree __vbaFreeVar __vbaLenBstr __vbaStrVarMove __vbaFreeVarList _adj_fdiv_m64 __vbaFreeObjList _adj_fprem1 __vbaResume __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaForEachCollObj __vbaExitProc ord595 __vbaOnError __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaStrTextCmp __vbaBoolVarNull _CIsin ord631 __vbaErase __vbaVarZero __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef ord560 ord561 __vbaObjVar __vbaI2I4 DllFunctionCall ord670 __vbaCastObjVar _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaNew __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface ord710 __vbaUI1I4 __vbaExceptHandler ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 __vbaFailedFriend __vbaFPException __vbaInStrVar __vbaStrVarVal ord534 __vbaVarCat __vbaI2Var __vbaStopExe ord644 ord645 _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy ord573 __vbaI4Str ord681 __vbaFreeStrList __vbaVarTextTstGt _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaAryVarVarg __vbaFpI4 ord616 ord617 __vbaLateMemCallLd _CIatan ord618 __vbaStrMove __vbaCastObj _allmul _CItan _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

4c05376b3cbbabf0b2af73e91aeab155e628e9fbcd4b2710a1622735abe190f5

msvbvm60

generic