5d5a06d11670f1d0bd1ddf7b30123463 | Triage

Sharing

General

Target

5d5a06d11670f1d0bd1ddf7b30123463
Size

2.0MB
MD5

5d5a06d11670f1d0bd1ddf7b30123463
SHA1

f3e81cec1f931e549336b85b3d6ef767a2056239
SHA256

47a46df4c4465b424cf2d9961eb3c1965b1a73ce5aa4167f259960f4ea201463
SHA512

91690dbef18c1c91ceff4ac02f800c52ee9eb100bc9cf29279e26559485b4c7732e23b8db600723ef05207ace25c476411b59b2387a167a99c5e6ba4cc7bd894
SSDEEP

24576:uynj0fN7G7N8ACfDKjg1KBeYJwb9sov744BZsxuUuBodlOMSPCWs4c6:RngKQdqJwbeS744B+uxBodlOXPCR4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5a06d11670f1d0bd1ddf7b30123463

Files

5d5a06d11670f1d0bd1ddf7b30123463
.exe windows:4 windows x86 arch:x86

92185ca1b81b094b3cb43d402a3b66ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaPut3
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
ord667
__vbaAryDestruct
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
ord526
__vbaFileClose
__vbaGenerateBoundsError
__vbaGet3
_adj_fpatan
ord600
_CIsqrt
__vbaExceptHandler
ord711
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaAryLock
__vbaVarDup
_CIatan
__vbaStrMove
__vbaAryCopy
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ