0c8b126c16d7bd455d8f9996749dd45e | Triage

Sharing

General

Target

0c8b126c16d7bd455d8f9996749dd45e
Size

24KB
MD5

0c8b126c16d7bd455d8f9996749dd45e
SHA1

962908d8e228be1228453feb2f5a48348f609f57
SHA256

19e9e04cdf40e7f9a8959cc5b6e093f1bccc73edd0d434f692f947aeaa7faa34
SHA512

fa726ddef176ac65290d71f61fad297c847b5f5481f6c2850457cb78ca24a56c21c0d53bdb5361aea37dc3ccb3348bcd3a242bd79e2078ba4dbc9a4628283f34
SSDEEP

384:5SVeXwu7L5874vyHDXtmhQyIVuvF0hFvhKUcZEdrpP6rd8eG:5aeAu7t1sXtWhd0hFvhKUcZEdVird8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8b126c16d7bd455d8f9996749dd45e

Files

0c8b126c16d7bd455d8f9996749dd45e
.exe windows:4 windows x86 arch:x86

a9f15f4aadefa41235fbf0faf5612387

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord695
ord696
ord698
MethCallEngine
ord522
ord630
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord100
ord689
ord610
ord614
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ