0bdbeba7d0a9fe8e846b4e9c16c3173a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bdbeba7d0a9fe8e846b4e9c16c3173a
Size

20KB
MD5

0bdbeba7d0a9fe8e846b4e9c16c3173a
SHA1

90a7ef231440adfe6dce4a2b93e1824f91afdd73
SHA256

d7b4e6a89e8bba0ef0e7ddde3ab1c1766b3e127e0c6c430dc544ca89e0d060ca
SHA512

033f0b1b19150e85a192207e6a2d4b870aa171045358ce508a1f535fcb0caee52abc92ab26902c825749dc1b93d3fcdf095b2ec83299dc34f1b02e9248e2b5a8
SSDEEP

48:y3Q/97Wr1iU4W27CBGYPILJEf3/Hh7iSsbCPkRNFfnyYex3R3C8OSMw3w8kK2:SS9Kr1gD7kGYPEJEnh7KCslL61XwkH2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bdbeba7d0a9fe8e846b4e9c16c3173a

Files

0bdbeba7d0a9fe8e846b4e9c16c3173a
.exe windows:4 windows x86 arch:x86

c7f9aca3a14a98c707e5af3b00de4b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaLateIdCall
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ