0c12f4e254392c02dd1cb031aab8f27e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c12f4e254392c02dd1cb031aab8f27e
Size

48KB
MD5

0c12f4e254392c02dd1cb031aab8f27e
SHA1

5bd4f8ae5435bc0ed7398efeaf34a0b222c815bf
SHA256

41bb3598b33d0496b58da276cdf343fb162850f267f997fe073395fa734f048f
SHA512

54b81419d7d37511d591d17b7206b916dfbc6269a44cf4ee08f6b3c38da29a05a2f2d909d9eb42e302a011c6f20190cb47dd74464372b62118623fdafbdb3b23
SSDEEP

768:3iNUTYjGbOJNONjCVPCEsokl/9++3jJR9ec:3tMKb1ucokl/dMc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c12f4e254392c02dd1cb031aab8f27e

Files

0c12f4e254392c02dd1cb031aab8f27e
.exe windows:4 windows x86 arch:x86

2b95def43c645bdec2b2bb4bc3b94fa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord595
ord631
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord685
ord100
ord689
ord617

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ