ca8cad40ad00e900a002a03405905e1141909ad434f1f03d2f84dfbeb23d338c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca8cad40ad00e900a002a03405905e1141909ad434f1f03d2f84dfbeb23d338c
Size

72KB
MD5

0fa3b1d5dbf95e785194c585e21d0ff6
SHA1

6994d0aab4bf6938df28be7b1dfbb38423e7d191
SHA256

ca8cad40ad00e900a002a03405905e1141909ad434f1f03d2f84dfbeb23d338c
SHA512

d6eb7fb49eeee4fc72499651a04abc3d433641700ffd7743154d413441630c60930e72584b306d9e08038b50dfd8fbe91b038fc26d60329e1ababa5015ac09c8
SSDEEP

768:/ienGDS779CqpixgAUlF7z9veTrtHO+Osj8z9ve7lF7AKCqpixh777GDi:/qDG9/paRS1zgFu+fj8zghiK/palqD

Score

N/A

Malware Config

Signatures

Files

ca8cad40ad00e900a002a03405905e1141909ad434f1f03d2f84dfbeb23d338c
.exe windows x86

bf86227700d67c7d45b9d303d002b172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ