8bf7c0b458ada14ffdd73e91eecefc68

PE Executable
|
MD5: 8bf7c0b458ada14ffdd73e91eecefc68
|
Size: 8.02 MB
|
application/x-msdownload

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	8bf7c0b458ada14ffdd73e91eecefc68
Sha1	d82cf05c42d942d4f4bf0f5e4292563e83b97cf5
Sha256	e2822abbdcd990bd187506aba7f44d2b5f0c28e526f12baa1fddfdcdeecf19b4
Sha384	597757b4c8e666a9a3596428e147dccae22e2576a6c88d62bec365a9a71395fb9bcf9682e08866f8b56ce39574c1c74e
Sha512	1e61442ecca0828154116d3ff8de163c4aa207d873dac7cc6891462ea85a302be1049722357855d0e8b0749f6ab275bf37407f26f2aa84f8a954464bf5ce0c29
SSDeep	196608:WLC09WVMQhvM/xkBejoS7lYW8f+OVA6VxU+1DZOMqVn:W208/mSMjov9LVW+1DZOMK
TLSH	9E8623237FE1CD35C1282E3D5CF683277A36BF510D2915023FA51E6A8A36A94FE512C6

PeID

BobSoft Mini Delphi -> BoB / BobSoft

Borland Delphi 4.0

Borland Delphi v3.0

Borland Delphi v6.0 - v7.0

D1S1G v1.1 beta --> D1N

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

File Structure

Artefacts

Name0	Value
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

8bf7c0b458ada14ffdd73e91eecefc68 (8.02 MB)

File Structure

Characteristics

vbaDNA - VBA Stomping & Purging Stategy detection

	Module Name0
	ThisWorkbook	Blacklist VBA VBA Macro

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	8bf7c0b458ada14ffdd73e91eecefc68 > [Repaired @0x007A0DDC] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	8bf7c0b458ada14ffdd73e91eecefc68 > [Repaired @0x007A0DDC] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	8bf7c0b458ada14ffdd73e91eecefc68 > [Repaired @0x007A0DDC] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	8bf7c0b458ada14ffdd73e91eecefc68 > [Repaired @0x007A0DDC] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]

You must be signed in to post a comment.