00cc9d965ad5293097e52a5c1ef2aa0e | Triage

Sharing

General

Target

00cc9d965ad5293097e52a5c1ef2aa0e
Size

576KB
MD5

00cc9d965ad5293097e52a5c1ef2aa0e
SHA1

06da9d4ae79c328b865e73fd48461295b0dccd85
SHA256

3c45cc94ccb5dbd3316f7a96ed7280b574a12a1ff0379fd25ba137c8d0e811f9
SHA512

0e3bf0599aafed58cfeda03203a768b53c6cd17cb772730ef590e2d32345aa2d4e1d6534ff21bc02c0d14da1c5b6c9435a5450268f796138eb913e4a938c5b0d
SSDEEP

12288:O5gO2oFo017fqF1SEHnqoGLXR0S+uucMKqdxLUbsmrMpcV:ugO2oLRB+HKqXqrMpcV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00cc9d965ad5293097e52a5c1ef2aa0e

Files

00cc9d965ad5293097e52a5c1ef2aa0e
.exe windows:4 windows x86 arch:x86

80a8f1e63fb14712532cdc209847fa4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord519
Zombie_GetTypeInfo
ord595
ord596
ord598
ord599
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord537
ord644
ord645
ord647
ord570
ord648
ord573
ord681
ord685
ord100
ord320
ord321
ord613
ord616
ord617
ord618
ord619
ord581

Sections

.text
Size: 292KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ