24d7878b03d0c430584a63604c82a9c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d7878b03d0c430584a63604c82a9c5
Size

152KB
MD5

24d7878b03d0c430584a63604c82a9c5
SHA1

51ff1f1d9a1753a9d41a358d66f9acc8dfc0e1ea
SHA256

bdee9e0ce4ac47e80a61142f2848970f001d50568b50f7d5b6d36e13f440c025
SHA512

45e39b80228184f96bb060d57d0db6850a9782bdec5d7ecf49aad83d13227ca58364425a0fd0668a4882a7ef75f078070f38c2d89ea200128743e132b88f53dc
SSDEEP

3072:aDHesfP8c5WFSTGHkhgbJTnEqU7H40URNI3KyFvn6ZDVa5rqiGS+Ocw5bszG9adJ:+MgWFLHkhgtTbU7H40URNI3KyFvn6ZDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d7878b03d0c430584a63604c82a9c5

Files

24d7878b03d0c430584a63604c82a9c5
.exe windows:4 windows x86 arch:x86

d3de8008a26dfea034f76b90f341f94f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord593
ord594
__vbaObjSet
_adj_fdiv_m16i
ord303
_adj_fdivr_m16i
ord599
ord309
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord613
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ