0c42ea72faa4db45a96d6277211641db | Triage

Sharing

General

Target

0c42ea72faa4db45a96d6277211641db
Size

48KB
MD5

0c42ea72faa4db45a96d6277211641db
SHA1

fbc8a0aa18168a7d8e97198865d687052564264e
SHA256

10cd68011d08e4fb3ae933dbd90f3e255c61361264dea07200f4c073e1112246
SHA512

1c87901ba13896830f219625ee1261f6e72e988a0ebb27565a218bd5325dffc687eacd17c4aed4a7b8515ff218c9527edb1e07cf785a382cc73edfd5e141c79e
SSDEEP

384:Aj9k05BC3ZzH+I0782suLWJX15mhvzuBbBXIqbVIafjyYn/I:w9lnu6BwgE19E3Y/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c42ea72faa4db45a96d6277211641db

Files

0c42ea72faa4db45a96d6277211641db
.exe windows:4 windows x86 arch:x86

c4370479aa6af229e6e10cf9f54f8f5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
Zombie_GetTypeInfo
ord598
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ord319
ProcCallEngine
ord648
ord573
ord100
ord320
ord321
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ