0c38c4c8c4f3c14169487b2295851d71 | Triage

Sharing

General

Target

0c38c4c8c4f3c14169487b2295851d71
Size

32KB
MD5

0c38c4c8c4f3c14169487b2295851d71
SHA1

5d4a1519d98d33e7c83b6509f948ba21974b2765
SHA256

530f707320841f1bfa73c1fae471b7b532669b06ce159f1f2e71e6fb9b1e4294
SHA512

476da3b2e8c4cfc98c9758fbb835e80c24d3a36decf64027435eae1082f75271a1f4c5296fa893d2d5f0c34694b55244340976f346938949805c696e79cfced4
SSDEEP

192:Eab8fWPl1l/cfvjmG4UzeFi98uidjZtiWeMZqVUs4pE9U5zy3L+r:zbVPFEfrmvOeFiGR/heUs4pbQKr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c38c4c8c4f3c14169487b2295851d71

Files

0c38c4c8c4f3c14169487b2295851d71
.exe windows:4 windows x86 arch:x86

f957d2587ade796fd71dcc2ecc54f4ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
__vbaPutOwner4
__vbaObjVar
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord608
ord716
__vbaFPException
__vbaVarCat
ord645
_CIlog
__vbaFileOpen
ord647
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaVarSetVar
__vbaLateMemCall
__vbaVarDup
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ