bcae17862624a1cb0e22c699e89ae215

PE Executable
|
MD5: bcae17862624a1cb0e22c699e89ae215
|
Size: 10.12 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	bcae17862624a1cb0e22c699e89ae215
Sha1	6c562f5d1f9725b8365085b25131451bdfa56691
Sha256	feb58fc44addde8aad50c0f77bc29971e18454e894d90dd8a93a068835bbf5ae
Sha384	2ec53107ca41cb7a9817edc72f1162982c5161ff5583b5e79a598419214c7f4324732859db6975ad5ca11c111a3de79f
Sha512	a160bafcd667c5f758824dc07e39dbf149523ba7088371a7c4f78d71300f3a433a10cc758518428835ebd0827f18ef13449a9b664dec1f2d4fd6d2e0a2ff8387
SSDeep	196608:2LxjV+/uto1qhrC06rf+KLR+9999999jyAvElf1kQZFbIQoSm7wtD0:2VjVcKCkKc9999999jjclf1dZFs3R6I
TLSH	EBA62331F2D18437D0731B395C7BA3A5983ABE411E387A0B37F51E8D5E7A28139642A7

PeID

BobSoft Mini Delphi -> BoB / BobSoft

Borland Delphi 4.0

Borland Delphi v3.0

Borland Delphi v6.0 - v7.0

D1S1G v1.1 beta --> D1N

Microsoft Visual C++ v6.0 DLL

Pe123 v2006.4.4-4.12

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)

Artefacts

Name0	Value
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

bcae17862624a1cb0e22c699e89ae215 (10.12 MB)

File Structure

Characteristics

vbaDNA - VBA Stomping & Purging Stategy detection

	Module Name0
	ThisWorkbook	Blacklist VBA VBA Macro

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	bcae17862624a1cb0e22c699e89ae215 > [Repaired @0x009A2E80] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	bcae17862624a1cb0e22c699e89ae215 > [Repaired @0x009A2E80] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Decompiled VBA]
URLs in VB Code - #1	https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download	bcae17862624a1cb0e22c699e89ae215 > [Repaired @0x009A2E80] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]
URLs in VB Code - #2	https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1	bcae17862624a1cb0e22c699e89ae215 > [Repaired @0x009A2E80] > xl > vbaProject.bin > Root Entry > VBA > ThisWorkbook > [Stored VBA]

You must be signed in to post a comment.