0b13a9bbccafe1066433735ae0c8f4f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b13a9bbccafe1066433735ae0c8f4f3
Size

84KB
MD5

0b13a9bbccafe1066433735ae0c8f4f3
SHA1

079cd42bf9bd10217d17ce4f77e79df3db628fab
SHA256

8f238f66bd966e78e69dc54b4ced98a1a741fefc51a2d057f81587a3670abe77
SHA512

a17ce231502c1b9ea4b97e244bc3581b31da901a712c76db90a21b17e690c05c02076e415173adc97a43d8e60c42b3ddaa35bf730f3de8eb24db4e44fc0e90ff
SSDEEP

1536:rq8yJoQ7bg4htUVGLG/wXJYeUj27dTf3i6Emqeh:L+UVeG/wXJY527Lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b13a9bbccafe1066433735ae0c8f4f3

Files

0b13a9bbccafe1066433735ae0c8f4f3
.exe windows:4 windows x86 arch:x86

21852e072310d5ae96c903a6785a3032

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord516
ord517
ord518
ord519
ord555
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
ord675
EVENT_SINK_Release
ord679
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord644
ord645
ord681
ord578
ord100
ord579
ord687
ord613
ord616
ord617
ord618
ord619

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ