20d7227c2d27ae01b95bc9740af59172 | Triage

Sharing

General

Target

20d7227c2d27ae01b95bc9740af59172
Size

20KB
MD5

20d7227c2d27ae01b95bc9740af59172
SHA1

3183f3b95cbec02a3150f868ee4af91de225de46
SHA256

c26026553e6ee2e4dfc99cfaf049af4bc739c0111054ba1c1de67e5fde35ec3e
SHA512

1e90732b23c1fe8e994b37c2bc0231dcad9519e41bb31880e453918c6ce36d2395ec46cb9aeb836e4079e7b1ff6f3ce7bce3a23b1f00cb9164e407129d7140dd
SSDEEP

96:/lxmcLLt58c/cgPtqifBPVADGej1elWIS6+a4V2kKYD304A0gV2:/TvL/8c/cgZZSqej1S3+a4DfD304Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20d7227c2d27ae01b95bc9740af59172

Files

20d7227c2d27ae01b95bc9740af59172
.exe windows:4 windows x86 arch:x86

d3264c9b442666a4f720609f7989c71d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord712
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ