70161999b575dc2975e8f88acb47903e

PE Executable
|
MD5: 70161999b575dc2975e8f88acb47903e
|
Size: 1.64 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	70161999b575dc2975e8f88acb47903e
Sha1	cab7ccf7d66540b0bf3613a460a39ffa8b9920cc
Sha256	35a9d0a41ffc3fcc67dc174be1905bd83037f6877ea342b215559b9cbd8fd0de
Sha384	fc2ce9d12d8c9b50942c8c999af4d986fc6bb8d5d7c5900077dc7691c5cf5f02663619542a8215dca2b310d8ca0d8d8b
Sha512	37064cbf406552e15c5d096b32aa2c758c3cc4f28152d38343e6fa1b7eba0c9c71f2f8e1ac6dfbc86db68ae226d95dbd35c05eb51b3f623d34ede8b877b80ed9
SSDeep	24576:FnsJ39LyjbJkQFMhmC+6GD9L9GHcbOBiBiqyIbDLftVOPAxqbFu:FnsHyjtk2MYC5GDfuUbDZV0AwFu
TLSH	5A759EA2F1908877D4670AB5AC2BE2301467BE986C74510D6BE97F0F7A73342345EE4B

PeID

BobSoft Mini Delphi -> BoB / BobSoft

Borland Delphi 4.0

Borland Delphi v3.0

Borland Delphi v6.0 - v7.0

D1S1G v1.1 beta --> D1N

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)

Artefacts

Name0	Value
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

70161999b575dc2975e8f88acb47903e (1.64 MB)

Name0	Value	Location
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	70161999b575dc2975e8f88acb47903e > [Repaired @0x0018C5B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	70161999b575dc2975e8f88acb47903e > [Repaired @0x0018C5B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	70161999b575dc2975e8f88acb47903e > [Repaired @0x0018C5B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	70161999b575dc2975e8f88acb47903e > [Repaired @0x0018C5B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]