0bb95c784807a06502b4b46a4de01b1d | Triage

Sharing

General

Target

0bb95c784807a06502b4b46a4de01b1d
Size

20KB
MD5

0bb95c784807a06502b4b46a4de01b1d
SHA1

723e624c09d64a9583f3e42a6031b73c195b7196
SHA256

6bc378429ec13adb88a1a499604337fff8a6b324caeb2fad41ef33b1c9e27e56
SHA512

f10e909cce4e10e4ee4e722eb7809b9b54ea2e4ecfc606d65d0e38891add9f13b1b24da9ebf61ec281d47bdc6c76330fc76fcc84ac7baa8b05117f234ff5e72a
SSDEEP

192:EJT+E+ljGNgy3e5zjmPc+RnVk9H0C7zl4lx9Amaj+R0E+Rn:cG8NX3gz6PUN7uDRaj+Rf+Rn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb95c784807a06502b4b46a4de01b1d

Files

0bb95c784807a06502b4b46a4de01b1d
.exe windows:4 windows x86 arch:x86

5098fad9658ac3e2112f55f3b1142203

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord693
ord696
MethCallEngine
ord518
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord530
ord717
ProcCallEngine
ord644
ord647
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ