0c9933af5b8e6396c2d26626b70832c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c9933af5b8e6396c2d26626b70832c6
Size

40KB
MD5

0c9933af5b8e6396c2d26626b70832c6
SHA1

c94ab549d04c91c71e7f9d1e467f01d1fb66aebd
SHA256

cff421f9816db1842e39c0d29353194045fdf9b69cd55569b2d6a9b28c61621e
SHA512

4b0b5134b022d08e9abfcea88a4b312492e376da66c7988f1b50b2c665613077090473bf613b433c831e779d32657f7bca378aa7cba302e7ccb8117f7138afe4
SSDEEP

768:A06F5aJ+a3hQayZHbZBdHXwHMbfCLh2MHF0m5Ufvc:Av6+a3unZHbNqH28pUfvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c9933af5b8e6396c2d26626b70832c6

Files

0c9933af5b8e6396c2d26626b70832c6
.exe windows:4 windows x86 arch:x86

8a0a5343feaaabb3dea2557cc7b45ead

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord685
ord100
ord616
ord618
ord546
ord547
ord580

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ