cb7f9a82624f604169a3b6435604fe47[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb7f9a82624f604169a3b6435604fe47.bin
Size

3KB
MD5

8b2e84d1ec4f8fe3f93bb6bf8e8641b0
SHA1

5d7af58b9190a989e0594638ef3dccf0445f54a1
SHA256

8df31806659d95da4b3d0689bb83a7ebfb54647833dc0a949ae54f9c0babe29d
SHA512

6c46ef93b74ef0269ee4895879f0ab172d4c5123dfb9ec1ff629d8a45dc682e2f124511b5eee21f3429b445bdf4eafc592daae3bce707e9ef1e5abf76d1abfc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/328c5d9f63a06ed71c9f7a5c0c18ef399526fb396640ae6bb7a502625c7bcfcf.exe

Files

cb7f9a82624f604169a3b6435604fe47.bin
.zip

Password: infected
328c5d9f63a06ed71c9f7a5c0c18ef399526fb396640ae6bb7a502625c7bcfcf.exe
.exe windows:4 windows x86

212368ec821b13e65c34676ba345cc12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ