208a78e768635841bcaee77586dc54e3 | Triage

Sharing

General

Target

208a78e768635841bcaee77586dc54e3
Size

72KB
MD5

208a78e768635841bcaee77586dc54e3
SHA1

e3a4b05856d730358c4f06ad8967dc2e14e9c231
SHA256

21fd383013952735eee6e858bb86cb8d7a77ec99646efcdecc689b3978811622
SHA512

f35fbf2a5d7d7f3d20cd4ac0b31eb7034caa7ca7bee823f735375a6c444f96f4d5183717edcc0c9fe66f002eef61368656cf67cb65f4141bc750620ce1b5d6ed
SSDEEP

768:3v8s3i6E5nXfUWPYfIc/Qi3qEBQpKGt0DlNvsnUp93qEBjUWPYfIc/QAnXZs3i6S:Z3i6EBXlLOUpNt0QnUp9NLMXy3i6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
208a78e768635841bcaee77586dc54e3

Files

208a78e768635841bcaee77586dc54e3
.exe windows:4 windows x86 arch:x86

2cfdf38b828049147dd92c40f5bd32c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE