c9a5542d098230ce016125a90e20895c[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9a5542d098230ce016125a90e20895c.bin
Size

140KB
MD5

c9a5542d098230ce016125a90e20895c
SHA1

214da340753362bf8e6152e2e1bf14ce437e4e46
SHA256

b15225b62ab21063e1397fb9da4da92a5902d0f806842dc8eee33664f047abfc
SHA512

8dc36856b2f71300398eb0c36d342c96077479b05523bd1b2dbec0f3c176bec12aeb86259725eec6d4a6b630b5aa8fdb2090cc98133aeaf754b71899807e5ef6
SSDEEP

3072:H/mKyHOeNvlLO8pKeap9NLq/mKyHOeNv:f2HPH0G2HP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9a5542d098230ce016125a90e20895c.bin

Files

c9a5542d098230ce016125a90e20895c.bin
.exe windows:4 windows x86

b5688d14696c0efcb4bfb3c1231064a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord598
ord520
ord525
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ord716
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord578
ord100
ord579
ord610
ord616
ord617
ord619
ord542
ord545
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ