244dac160852cfc1249469dbeed26e7b | Triage

Sharing

General

Target

244dac160852cfc1249469dbeed26e7b
Size

20KB
MD5

244dac160852cfc1249469dbeed26e7b
SHA1

f86692383af2169c79c503fc98c899d625e3c839
SHA256

3cd2f93ca2a1c77c14e6072992a4c570c2602b6da53fcad24f5499e082862d67
SHA512

6a92ba01520f16e82ac6bd3b6cc5593e4c8b9debf9fa4c08644bb30fdd9da67e67ce3b1d9c07e1a8ee093999512ffe006a6be06309d923cc425783484e38ec33
SSDEEP

96:qcuHAf6YyHXjzgn16bBVbIUHF7BrLTgfKYKDMKQpVESudMmEzyHWFK5svEaATwOX:sHq4ng1BQVr4fKfLQv+dezyHaadX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244dac160852cfc1249469dbeed26e7b

Files

244dac160852cfc1249469dbeed26e7b
.exe windows:4 windows x86 arch:x86

37b415e4f8f0623c66a8f6f7b2059c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ