0c4bd1f00b991380d5f09f7e862cc199 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4bd1f00b991380d5f09f7e862cc199
Size

291KB
MD5

0c4bd1f00b991380d5f09f7e862cc199
SHA1

37521c1b8f5ebcc8fb2e82e20c2ab797b9274326
SHA256

a3787b7339eddbca76159968f456f8dee00fd90586fdd0d83538d1f6fdc4ba27
SHA512

e06813756142e9fb1109d7f97abf630384d93e1d37fa6017767665d0980f4e3e7a38ad27a8f6d1c7d61d30e2df3e666c4caaec4bae4437a6d54b10a28064bdca
SSDEEP

6144:QxJ4/MQ/4MbWHgyvSqsblPNkbq0D95Ei7YjOdMmefJipajS+n9Rw:yJ40Q/FoxvSXxObq0D95R7XdbOJij+nI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4bd1f00b991380d5f09f7e862cc199

Files

0c4bd1f00b991380d5f09f7e862cc199
.exe windows:4 windows x86 arch:x86

74773e60bb7e17e013bda026bf6b401a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ