0cd901339d908def3de994c4f86682ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd901339d908def3de994c4f86682ab
Size

188KB
MD5

0cd901339d908def3de994c4f86682ab
SHA1

c10ccfdaed4f03f32ffdd95ad64dd4e8574579c1
SHA256

5cb461d92c0c981d3e65e37264190ae8b7cac60bbb2eb071295457b2a18961ac
SHA512

f1b7abae692a3b3359de93ee6c0d5103b173a86e9ba1fdbf7edf967e38f5ff2a9465b216b8168a4149e6b095d6d7f7db8e2f64ee0307e57ad6f91f85e699fe61
SSDEEP

3072:VViLkfWizuIUURUbaxFgkCPmEzQa4aqosAm+w90ZbF:IsuIL1tUTzQa4aqosAm+w90v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd901339d908def3de994c4f86682ab

Files

0cd901339d908def3de994c4f86682ab
.exe windows:4 windows x86 arch:x86

194b919ace720b97faad1ef6a86986b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord587
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord660
ord556
ord591
ord593
ord594
ord595
ord301
ord598
ord520
ord307
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
ord672
EVENT_SINK_Release
ord679
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord607
ord531
ord717
ProcCallEngine
ord535
ord644
ord645
ord648
ord570
ord571
ord572
ord681
ord685
ord578
ord100
ord616
ord617
ord618
ord619
ord546
ord581

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ