5e1c9d45b9225b3da1cdcb803eb39ef7a89546415ac5eca7117521af13a9faf2 | Triage

Sharing

General

Target

5e1c9d45b9225b3da1cdcb803eb39ef7a89546415ac5eca7117521af13a9faf2
Size

24KB
MD5

3cb7548d63f54052527fe4b879e3e1d7
SHA1

dce95bfdbb0291735fae4e9a6721c8da7db2897d
SHA256

5e1c9d45b9225b3da1cdcb803eb39ef7a89546415ac5eca7117521af13a9faf2
SHA512

c4aaed5fe4798488b91f27df29a31512cb55571ef74658f96892079a5b2c8ac5baef0195671a1e719dabd01a1212032dca56c4c25cee2fe5bde4beec9cad38a8
SSDEEP

192:MZ8FJbzN+1//MfuGi0V1Y5b5Gd7T5W8rGjW3NuYcNALiWSVDAmLxP:CYb0/euIV1ktwVWQiW3hc6WWMDACP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1c9d45b9225b3da1cdcb803eb39ef7a89546415ac5eca7117521af13a9faf2

Files

5e1c9d45b9225b3da1cdcb803eb39ef7a89546415ac5eca7117521af13a9faf2
.exe windows x86

b3fdd5fc0a98362d9eed129ad80e5e02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrVarMove
__vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaI2I4
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarAdd
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ