94328c59a999bd9792d29509961ba9ef

PE Executable
|
MD5: 94328c59a999bd9792d29509961ba9ef
|
Size: 1.63 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	94328c59a999bd9792d29509961ba9ef
Sha1	249c20d0491dba7c9cc9c9f93cafc5aebdc2a31f
Sha256	fdd36a586f4979bb696ae7863c45e7332a6e318ef3a6189e1adec270fa698bb6
Sha384	a788af02d7247261546bacfa4a41884ff40b232b9235370798087c2b6d13445ac95e38c124792e363c39334c42c53b93
Sha512	0e49bec5f7a97306f084d46400782ace501f3c28dec8309587b8adf7c9baa013ca821eea053a80de3ecc631d983e2688fb3eed2d840ccae3320ac0389e410844
SSDeep	24576:9nsJ39LyjbJkQFMhmC+6GD9KgfcPssKYO6TUUZI1NApEYE1IPoR:9nsHyjtk2MYC5GDBiTKYO6A7vYE1p
TLSH	27759EA2F190C877D4670AB59C2BE2301467BE986C74510D2BE97F1F7AB3342345EA4B

PeID

BobSoft Mini Delphi -> BoB / BobSoft

Borland Delphi 4.0

Borland Delphi v3.0

Borland Delphi v6.0 - v7.0

D1S1G v1.1 beta --> D1N

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)

Artefacts

Name0	Value
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

94328c59a999bd9792d29509961ba9ef (1.63 MB)

Name0	Value	Location
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	94328c59a999bd9792d29509961ba9ef > [Repaired @0x001899B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	94328c59a999bd9792d29509961ba9ef > [Repaired @0x001899B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	94328c59a999bd9792d29509961ba9ef > [Repaired @0x001899B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	94328c59a999bd9792d29509961ba9ef > [Repaired @0x001899B8] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]