1916ac69b6c8157913707443ac24d6ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1916ac69b6c8157913707443ac24d6ad
Size

140KB
MD5

1916ac69b6c8157913707443ac24d6ad
SHA1

8181b04e3c66db0444f7d3fe54184dd18155bcd2
SHA256

c4478e4f336a136e43db5b2254121ff0faf0b3c008d6bc61e5cfd6bf9da6213e
SHA512

28c394b67fd58d38726b7c73674c1523098b244c94cdee0993f2aaf3fae45334b9c0fbffd9f60eaf656d5b4f649dc5bba6c83d08c95353f13490061960ec185e
SSDEEP

1536:/tUwkg6+VfjoQVHJetlTVPo+VfD6YwkX:Li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1916ac69b6c8157913707443ac24d6ad

Files

1916ac69b6c8157913707443ac24d6ad
.exe windows:4 windows x86 arch:x86

3d7d3ce1ff47e4a1fa0575e7053cd353

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaLateIdCall
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ