0c93fe89c214b4c05f7d3fcf641cb3d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c93fe89c214b4c05f7d3fcf641cb3d0
Size

132KB
MD5

0c93fe89c214b4c05f7d3fcf641cb3d0
SHA1

26b3f8b325a65b1540105f4ffc9b46efadee0b2c
SHA256

98c0d2d1c248a2cb6763ed5292aa92b3559443344f57b1f8f4e0c2e8f0c30c9f
SHA512

ee850efa8ecb02873939cf20a7b8b612b757a000382d365e7550a8536ae6e2ffde82ef5d312821ca7e76bbc2f84a86a6e51e5379ba35579468e5b16cfdbfd8d2
SSDEEP

3072:KThmdQEVpSH1ahEBsZBak8sgMoD3wtd2ZCwxRwES4os71+7qvGWdr3GZ:KT4dQEVpQwtYgwQmE7qvGWdru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c93fe89c214b4c05f7d3fcf641cb3d0

Files

0c93fe89c214b4c05f7d3fcf641cb3d0
.exe windows:4 windows x86 arch:x86

7f7027bdfbceae4b05d3cfe4a6f74e23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord573
ord100
ord617
ord619
ord581

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ