76e6b78b9808cd4766f673ef091de07a

PE Executable
|
MD5: 76e6b78b9808cd4766f673ef091de07a
|
Size: 7.99 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	76e6b78b9808cd4766f673ef091de07a
Sha1	4706f90a4a455dae6b1a928b247084501ab96551
Sha256	0ff8c68ae45074d7866b65839609626a8d7b3a5292a38a39a72b57bd626add4f
Sha384	31c3730e1c579525505b5826042f2f0c0401069f935a72707f0bda7b73f5ba50a573cbbbecd2b67a5fb6f7e4059977e1
Sha512	bddb37f3151181584c498bd220f36f7a52af8ea6373f90d61278beae8bc3b982390f7b2f993ddf72a33b5f05d4b5a21e893e0b1ddd7ba6c91d78757c5efc2d72
SSDeep	196608:iLqeFgxFYK2GU3giv67kF+d/TqcbVjULchUpCMyKOogQFEH6ob4tzWfj7gmBa:ivFgYKEQiC7kcd/GmBU46pfvOogQFEHu
TLSH	6D86D0E2107A4A53E431C0B50EDF2E57C9DA92D3575A30956F9D2CF48B30CEE28E5AC9

PeID

BobSoft Mini Delphi -> BoB / BobSoft

Borland Delphi 4.0

Borland Delphi v3.0

Borland Delphi v6.0 - v7.0

D1S1G v1.1 beta --> D1N

Microsoft Visual C++ 6.0 DLL (Debug)

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

File Structure

Artefacts

Name0	Value
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

76e6b78b9808cd4766f673ef091de07a (7.99 MB)

File Structure

Characteristics

vbaDNA - VBA Stomping & Purging Stategy detection

	Module Name0
	ThisWorkbook	Blacklist VBA VBA Macro

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	76e6b78b9808cd4766f673ef091de07a > [Repaired @0x00798BB8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	76e6b78b9808cd4766f673ef091de07a > [Repaired @0x00798BB8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	76e6b78b9808cd4766f673ef091de07a > [Repaired @0x00798BB8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	76e6b78b9808cd4766f673ef091de07a > [Repaired @0x00798BB8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]

You must be signed in to post a comment.