0ef002dfb50ec093f171e1fe9273c8e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ef002dfb50ec093f171e1fe9273c8e7
Size

7KB
MD5

0ef002dfb50ec093f171e1fe9273c8e7
SHA1

ca986dc502bf7e0a1f4a5d8265e11f50d234592a
SHA256

61c464b20300720d09b8c61bec72de4fbc776bc24e280ba533e882f33e70916c
SHA512

6475e7f29e83a7cc0f5c5f43f950d2ba9bccd9a554c37fba3b860a69e62595b9bc3be554d9e014a301a36305b6704f6f12a1acfe52685596099d5b81a9824572
SSDEEP

192:JspVJaKsslNdgsoThTUHAxA/AZ8c6PZL59lYW0tPZUeBRJFtrt9QIa:gqHgLoxUHAQAHUsDPBbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VB程序太平洋.EXE

Files

0ef002dfb50ec093f171e1fe9273c8e7
.rar
Form1.frm
.vbs
Form1.frx
Project1.vbp
Project1.vbw
VB程序太平洋.EXE
.exe windows:4 windows x86 arch:x86

d2649867cedca90066a116140657c3c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot