374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05

General

Target
374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05
Size 456KB
Sample260914-pe5djscl6x
SHA256 374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05
MD5 b855b1b7b59668ad991cf0501e4ff4cb
SHA1 581283899259e80b7da5d8be25f6ed1de58fdfac
SHA512 71e59b09678df1dca36caca3280687723406c2ccf638e2d7e57a34ea099fb269646730966c96d89dcaab23914f1915664fac4491f09bb17216ed3f3c6acb64c6
SSDEEP 6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuN:zJB0lh5aILwtFPCfmAUtG
TLSH
T199A45D29EB557976F2530976B600699F2C818C391293DF4AAF4289CDB801DE3F2F5327
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05

File Explorer

374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05

.exe 456KB

374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05

IMPHASH 58471b8a9f8702d1a9e4838d7b7d501a
SHA256 374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05
MD5 b855b1b7b59668ad991cf0501e4ff4cb
SHA1 581283899259e80b7da5d8be25f6ed1de58fdfac
SHA512 71e59b09678df1dca36caca3280687723406c2ccf638e2d7e57a34ea099fb269646730966c96d89dcaab23914f1915664fac4491f09bb17216ed3f3c6acb64c6
SSDEEP 6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuN:zJB0lh5aILwtFPCfmAUtG
TLSH
T199A45D29EB557976F2530976B600699F2C818C391293DF4AAF4289CDB801DE3F2F5327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

SysFreeString SysAllocStringLen SysAllocStringByteLen SysStringLen

user32

LoadStringW WaitMessage

kernel32

GetProcAddress VirtualAlloc VirtualProtect GetStartupInfoW RtlMoveMemory WideCharToMultiByte SetFileApisToOEM GetModuleHandleW SetFileApisToANSI GetUserDefaultLCID

msvbvm60

__vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaVarIdiv __vbaFreeVarList _adj_fdiv_m64 __vbaVarFix _adj_fprem1 __vbaHresultCheckObj _adj_fdiv_m32 __vbaAryDestruct __vbaVarForInit __vbaVarPow __vbaObjSet _adj_fdiv_m16i _adj_fdivr_m16i ord706 __vbaBoolVarNull _CIsin __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaVarOr __vbaRedimPreserve _adj_fpatan __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt EVENT_SINK_QueryInterface __vbaUI1I4 __vbaVarMul __vbaExceptHandler _adj_fprem _adj_fdivr_m64 __vbaVarDiv __vbaFPException __vbaUbound __vbaStrVarVal _CIlog __vbaErrorOverflow __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaFreeStrList _adj_fdivr_m32 __vbaR8Var _adj_fdiv_r ord100 __vbaI4Var __vbaVarCmpEq __vbaAryLock __vbaVarAdd _CIatan __vbaStrMove _allmul _CItan __vbaAryUnlock __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj ord581

Sharing

General

Malware Config

Signatures

File Explorer

374ef83de2b254c4970b830bb93a1dd79955945d24b824a0b35636e14355fe05

oleaut32

user32

kernel32

msvbvm60

generic