06d13858a19f5b0d943b1a8dd2e59adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06d13858a19f5b0d943b1a8dd2e59adf
Size

19KB
MD5

06d13858a19f5b0d943b1a8dd2e59adf
SHA1

f936f2ec8ade01950cab1ed7fba3fbaa4ba33d7c
SHA256

7a3e9cd2b890e590bc2962c58e445c0a88da187d44d7cc12f00b561fe7d2d710
SHA512

31a33611cbb73c53e38c34a68088d843a0fdbf57e2777001ee740556a817e888b1813cdf3f33c17a902154bd9fb86c197bc75a61dfd9981560c3c3922d876884
SSDEEP

384:22ursZEvSrTKNvA5RB3PXUeo4Lc6hEdi:zFZEC2NINPEYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d13858a19f5b0d943b1a8dd2e59adf

Files

06d13858a19f5b0d943b1a8dd2e59adf
.exe windows:4 windows x86 arch:x86

6eaa8af0c1393f74c5f1e4c5142d7675

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaNameFile
_adj_fdiv_m32
__vbaOnError
ord595
_adj_fdiv_m16i
ord597
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord529
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaVarCopy
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ