6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29

General

Target
6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29
Size 6.7MB
Sample261017-l4cs2sec67
SHA256 6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29
MD5 6b441f279d3aaa8328056f4a4c6d51c1
SHA1 802f35cde48ba04082c7014e44f62c33ff0c8050
SHA512 8d2e63fb2ec7aad6b37a03a4fd9c081b5a4fcf8667e4692ea496a517374b45ca2f04bf72a7ac460e24439865036b4a84b9c428e3660020b9e239771e971ff08e
SSDEEP 196608:7QCeenHCP0KUf77D/nFA9HiV5tJ0QnndAGEerZ:2MK877rFYiV7JjndAGEgZ
TLSH
T1E7666C37EA00F586E44280303A24967BBD28BD3655025827FB8D6E9677B49D3F6F470B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29

File Explorer

6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29

.exe 6.7MB

6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29

IMPHASH b25ec09209cbac0feda9f233acfe79b7
SHA256 6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29
MD5 6b441f279d3aaa8328056f4a4c6d51c1
SHA1 802f35cde48ba04082c7014e44f62c33ff0c8050
SHA512 8d2e63fb2ec7aad6b37a03a4fd9c081b5a4fcf8667e4692ea496a517374b45ca2f04bf72a7ac460e24439865036b4a84b9c428e3660020b9e239771e971ff08e
SSDEEP 196608:7QCeenHCP0KUf77D/nFA9HiV5tJ0QnndAGEerZ:2MK877rFYiV7JjndAGEgZ
TLSH
T1E7666C37EA00F586E44280303A24967BBD28BD3655025827FB8D6E9677B49D3F6F470B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

51172

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvbvm60

ord582 __vbaVarTstGt __vbaVarSub ord583 __vbaStrI2 __vbaI2Sgn _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaFreeVar __vbaLenBstr __vbaStrVarMove ord588 __vbaLateIdCall ord589 __vbaEnd __vbaFreeVarList _adj_fdiv_m64 __vbaPut4 __vbaFreeObjList _adj_fprem1 ord518 __vbaRecAnsiToUni __vbaI2Abs __vbaResume __vbaStrCat __vbaVarCmpNe ord552 ord660 __vbaWriteFile ord553 __vbaSetSystemError __vbaRecDestruct __vbaHresultCheckObj __vbaLenVar _adj_fdiv_m32 __vbaAryDestruct __vbaLateMemSt __vbaStrBool __vbaVarForInit __vbaExitProc __vbaFileCloseAll ord595 __vbaObjSet __vbaOnError ord596 _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaFpR4 __vbaBoolVar __vbaForEachCollVar ord520 ord522 __vbaBoolVarNull __vbaFpR8 _CIsin __vbaErase ord632 __vbaVarCmpGt __vbaChkstk ord526 __vbaFileClose EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp ord529 __vbaGet4 __vbaVarTstEq __vbaAryConstruct2 __vbaR4Str __vbaNextEachCollVar __vbaPrintObj __vbaI2I4 __vbaObjVar DllFunctionCall __vbaVarOr __vbaVarLateMemSt __vbaFpUI1 __vbaCastObjVar __vbaRedimPreserve __vbaStrR4 _adj_fpatan __vbaR4Var __vbaLateIdCallLd __vbaStrR8 __vbaRedim __vbaRecUniToAnsi EVENT_SINK_Release ord600 __vbaUI1I2 _CIsqrt __vbaObjIs __vbaLateIdCallSt __vbaVarAnd EVENT_SINK_QueryInterface __vbaStrUI1 __vbaVarMul __vbaUI1I4 __vbaExceptHandler __vbaStrToUnicode __vbaInputFile ord712 ord606 _adj_fprem _adj_fdivr_m64 __vbaI2Str ord607 ord608 ord531 ord716 __vbaFPException __vbaInStrVar __vbaStrVarVal __vbaVarCat __vbaDateVar __vbaI2Var ord645 _CIlog __vbaErrorOverflow __vbaFileOpen __vbaNew2 __vbaInStr ord648 __vbaVarLateMemCallLdRf ord571 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaFreeStrList __vbaLateMemNamedCall _adj_fdivr_m32 ord577 _adj_fdiv_r ord578 ord685 ord100 ord579 __vbaVarTstNe __vbaVarSetVar __vbaI4Var __vbaVarCmpEq ord610 __vbaAryLock __vbaVarAdd __vbaLateMemCall __vbaVarDup __vbaStrToAnsi ord613 __vbaFpI2 __vbaCheckTypeVar __vbaVarCopy ord616 __vbaVarLateMemCallLd __vbaFpI4 __vbaR8IntI2 ord617 __vbaRecDestructAnsi __vbaVarSetObjAddref __vbaLateMemCallLd _CIatan __vbaStrMove __vbaCastObj __vbaR8IntI4 ord619 ord542 ord543 _allmul __vbaVarLateMemCallSt __vbaLateIdSt ord544 __vbaLateMemCallSt ord545 _CItan __vbaAryUnlock __vbaUI1Var __vbaFPInt ord547 ord548 __vbaVarForNext _CIexp __vbaRecAssign ord580 __vbaFreeObj __vbaFreeStr ord581

Sharing

General

Malware Config

Signatures

File Explorer

6ff900bfa7c50800344c4e982b716d9042e4497f2ce32d8ad5cf53acb0fb4f29

msvbvm60

generic