0c0dd65db2917bf99bf0c704f9276630 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c0dd65db2917bf99bf0c704f9276630
Size

88KB
MD5

0c0dd65db2917bf99bf0c704f9276630
SHA1

89ac174e125920a34f6943b12eef530169b56885
SHA256

3f67e597f4b14570b45675ad9f5e143c6cefa3c1be082b582f90ab86a570df0e
SHA512

cd8242d5f7eef1ff7718c34331bea8c8272955f164309955f021781dd3526ff132a1eca14c5ddb1ab016ab5cdc5ddb7db873af6a0de0ec49a1755a75e114dca7
SSDEEP

1536:9aVDyvSFEU6crBUBMyLe6us0HdRg9vSBvHEU66lDyv:y1rB2MyLeZs0HdRyvSBvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0dd65db2917bf99bf0c704f9276630

Files

0c0dd65db2917bf99bf0c704f9276630
.exe windows:4 windows x86 arch:x86

8f929613d6fd07f2870b57a8077b6892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
MethCallEngine
ord516
ord518
ord626
ord593
ord594
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord645
ord573
ord577
ord685
ord100
ord610

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ