1cf00ad92116eb1468771427fe6d490b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cf00ad92116eb1468771427fe6d490b
Size

60KB
MD5

1cf00ad92116eb1468771427fe6d490b
SHA1

55a0470058c66486a7aef4bda9d645bb134228c9
SHA256

b8d5251144c8b80a63eedc1a8a2f397f49a8ec8cedf9690f43da85e0e13451d0
SHA512

0fa95b5eeb257a5d6b183a59a20168ce43f67ac1e0990b77b63403d5d0d431ed9653c7c61bfaeef40e5cabb385698b5cf6c1da065115ee2bbe900f2180f3bc42
SSDEEP

768:RxKF28JDO1WsIxcOd1o423kmSX6YgEcSbLhcMUxuBE7be4kFiCG8Qymq1jRPZ:ri28wZpElcNxRW4kif8FZRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cf00ad92116eb1468771427fe6d490b

Files

1cf00ad92116eb1468771427fe6d490b
.exe windows:4 windows x86 arch:x86

424f813236d6a3a30aeb59f4af9006c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord592
ord595
ord631
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ord319
ProcCallEngine
ord644
ord685
ord100
ord320
ord321
ord616
ord617
ord581

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ