5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13

General

Target
5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13
Size 680KB
Sample260924-kzlpqaab39
SHA256 5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13
MD5 2463b1c9695e656203e491562c0e42e7
SHA1 3c01adc303e408525ec90fa63e5a0a96b0a65878
SHA512 bef68666eb9a410e15d927085a0cea2a04b7d4c892b5bc28da361c7e3903a70a2f9d34e54e692ce979825108629d3a1926e1a597e1aa81469b97ae14d92e5951
SSDEEP 12288:54K7YrgKA5FDN+2x4yeugHtDDD42876zuFO/NK39P9UmlpT3y2LSpHAbiVx0SQGn:17YrgKA5FDN+2xwugHtDDD428GzuFO/f
TLSH
T19DE4F823BB702107F5630031696976753826BC32791ADE4BE34AAB2925F19C3ADF531F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13

File Explorer

5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13

.exe 680KB

5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13

IMPHASH 7af4470c9a7b72476c804ab49bdec27a
SHA256 5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13
MD5 2463b1c9695e656203e491562c0e42e7
SHA1 3c01adc303e408525ec90fa63e5a0a96b0a65878
SHA512 bef68666eb9a410e15d927085a0cea2a04b7d4c892b5bc28da361c7e3903a70a2f9d34e54e692ce979825108629d3a1926e1a597e1aa81469b97ae14d92e5951
SSDEEP 12288:54K7YrgKA5FDN+2x4yeugHtDDD42876zuFO/NK39P9UmlpT3y2LSpHAbiVx0SQGn:17YrgKA5FDN+2xwugHtDDD428GzuFO/f
TLSH
T19DE4F823BB702107F5630031696976753826BC32791ADE4BE34AAB2925F19C3ADF531F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

EVENT_SINK_GetIDsOfNames __vbaVarSub __vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaCyMul __vbaAryMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaLineInputStr ord696 __vbaFreeVarList __vbaEnd __vbaVarIdiv _adj_fdiv_m64 ord512 EVENT_SINK_Invoke ord513 __vbaRaiseEvent ord621 __vbaFreeObjList ord516 _adj_fprem1 __vbaRecAnsiToUni ord518 ord519 __vbaI2Abs __vbaCopyBytes __vbaStrCat __vbaVarCmpNe __vbaError ord553 __vbaLsetFixstr ord660 __vbaSetSystemError __vbaRecDestruct __vbaNameFile __vbaLenBstrB __vbaHresultCheckObj ord662 __vbaLenVar _adj_fdiv_m32 __vbaVarTstLe __vbaAryVar ord666 Zombie_GetTypeInfo __vbaAryDestruct __vbaLateMemSt __vbaForEachCollObj __vbaExitProc ord593 __vbaVarForInit ord594 __vbaStrLike __vbaObjSet __vbaOnError ord595 ord596 _adj_fdiv_m16i ord303 ord702 __vbaObjSetAddref _adj_fdivr_m16i ord598 __vbaFpR4 __vbaStrFixstr ord520 __vbaBoolVar ord309 __vbaBoolVarNull __vbaFpR8 __vbaVarTstLt _CIsin ord709 __vbaErase __vbaVargVarMove __vbaLateMemStAd __vbaNextEachCollObj ord632 __vbaVarCmpGt __vbaChkstk __vbaFileClose ord526 EVENT_SINK_AddRef ord527 __vbaGenerateBoundsError ord528 __vbaStrCmp ord529 __vbaPutOwner3 __vbaAryConstruct2 __vbaVarTstEq __vbaCyI4 __vbaPutOwner4 __vbaObjVar __vbaI2I4 ord561 DllFunctionCall __vbaVarLateMemSt __vbaVarOr ord670 __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaFixstrConstruct __vbaLateIdCallLd Zombie_GetTypeInfoCount __vbaStrR8 __vbaRedim __vbaR8Cy __vbaRecUniToAnsi EVENT_SINK_Release __vbaNew ord600 __vbaUI1I2 _CIsqrt __vbaVarAnd __vbaObjIs EVENT_SINK_QueryInterface __vbaVarMul __vbaFpCmpCy __vbaStr2Vec __vbaExceptHandler ord711 __vbaPrintFile ord712 __vbaStrToUnicode ord606 _adj_fprem _adj_fdivr_m64 ord607 __vbaVarDiv __vbaI2Str ord714 ord608 ord716 ord531 __vbaFPException ord717 __vbaInStrVar ord319 __vbaGetOwner3 __vbaUbound __vbaStrVarVal __vbaVarCat __vbaDateVar __vbaCheckType __vbaLsetFixstrFree __vbaI2Var ord644 ord537 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaVar2Vec ord648 __vbaNew2 __vbaInStr ord570 __vbaR8Str __vbaVarInt __vbaCyMulI2 ord571 _adj_fdiv_m32i ord572 _adj_fdivr_m32i __vbaStrCopy ord573 ord681 __vbaI4Str __vbaFreeStrList __vbaVarCmpLt ord576 _adj_fdivr_m32 __vbaPowerR8 _adj_fdiv_r ord578 ord685 ord100 __vbaVarTstNe __vbaI4Var __vbaVarCmpEq __vbaFpCy ord610 __vbaLateMemCall __vbaAryLock __vbaVarAdd ord320 __vbaStrToAnsi __vbaVarDup ord321 ord614 __vbaFpI2 __vbaVarMod ord616 __vbaFpI4 __vbaVarCopy __vbaR8IntI2 __vbaRecDestructAnsi ord617 __vbaLateMemCallLd _CIatan ord618 __vbaStrMove __vbaAryCopy __vbaCastObj __vbaR8IntI4 __vbaStrVarCopy ord619 ord542 ord650 _allmul __vbaLenVarB __vbaLateIdSt ord545 _CItan ord546 __vbaUI1Var __vbaFPInt __vbaAryUnlock __vbaVarForNext _CIexp __vbaStrCy __vbaFreeObj __vbaFreeStr __vbaRecAssign ord581

Sharing

General

Malware Config

Signatures

File Explorer

5292bb71681027c21b3f595fb61a990554844cf5084460a88ed9b21e38044d13

msvbvm60

generic