91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744

General

Target
91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744
Size 608KB
Sample260930-gpjktssdne
SHA256 91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744
MD5 1163ef11bcca7cbbb4fc20e95d5f6824
SHA1 b68ead4ae3120f67e8d420d38c3a3ef5818460ae
SHA512 d663ec5e449d34815d5d47ec2467ad3ad4d6fcf448bc0be7d5b13abe543f91afb4ae77eea1482e63d1c66aa73da6d7f1b65609130cbc13c91c1be720b0c99c83
SSDEEP 12288:zTtp2vZHx/vAfIEZPgafw5Ebw7Wnacl8HE2WS6f190U5mQSjz77Y/UfiPZa:zSBhkJZXYGbwinaJK5mlz776UfiP
TLSH
T138D42369A68CBC92E71EC2B42A7581E970329DF6B5806C1776C03F7C1678947F0B8727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744

File Explorer

91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744

.exe 608KB

91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744

IMPHASH d12bdc18aea975a7b1f86aea6c5d998e
SHA256 91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744
MD5 1163ef11bcca7cbbb4fc20e95d5f6824
SHA1 b68ead4ae3120f67e8d420d38c3a3ef5818460ae
SHA512 d663ec5e449d34815d5d47ec2467ad3ad4d6fcf448bc0be7d5b13abe543f91afb4ae77eea1482e63d1c66aa73da6d7f1b65609130cbc13c91c1be720b0c99c83
SSDEEP 12288:zTtp2vZHx/vAfIEZPgafw5Ebw7Wnacl8HE2WS6f190U5mQSjz77Y/UfiPZa:zSBhkJZXYGbwinaJK5mlz776UfiP
TLSH
T138D42369A68CBC92E71EC2B42A7581E970329DF6B5806C1776C03F7C1678947F0B8727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5372

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

__vbaVarTstGt __vbaVarSub _CIcos _adj_fptan __vbaVarMove __vbaFreeVar __vbaStrVarMove __vbaLenBstr __vbaFreeVarList __vbaEnd _adj_fdiv_m64 __vbaFreeObjList ord516 _adj_fprem1 ord626 __vbaStrCat __vbaSetSystemError __vbaHresultCheckObj _adj_fdiv_m32 __vbaVarTstLe ord591 __vbaVarForInit __vbaOnError ord595 __vbaObjSet _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaForEachCollVar __vbaBoolVarNull _CIsin ord632 __vbaChkstk EVENT_SINK_AddRef ord528 __vbaGenerateBoundsError __vbaStrCmp __vbaVarTstEq __vbaObjVar __vbaI2I4 __vbaNextEachCollVar DllFunctionCall _adj_fpatan EVENT_SINK_Release _CIsqrt EVENT_SINK_QueryInterface __vbaExceptHandler __vbaStrToUnicode _adj_fprem _adj_fdivr_m64 ord607 ord716 __vbaFPException __vbaStrVarVal __vbaVarCat ord645 _CIlog __vbaErrorOverflow __vbaNew2 __vbaInStr _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaVarNot _adj_fdivr_m32 _adj_fdiv_r ord685 ord100 __vbaVarSetVar __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaStrToAnsi __vbaVarDup __vbaVarLateMemCallLd __vbaVarCopy ord617 _CIatan __vbaStrMove __vbaCastObj __vbaStrVarCopy ord619 _allmul _CItan __vbaVarForNext _CIexp __vbaFreeStr __vbaFreeObj

Sharing

General

Malware Config

Signatures

File Explorer

91374a0a8c8ce0ae0c25753da5b5688ca2090e1e56f30e5c87af8029a6e61744

msvbvm60

generic