38deee36975019af0cd44e9de717a0e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38deee36975019af0cd44e9de717a0e2
Size

116KB
MD5

38deee36975019af0cd44e9de717a0e2
SHA1

d8eb2b1defc1429c9c37f5b8091993b503e36d02
SHA256

a787311722c3f463beb8e8b970c86e9ec639c3c3d60e32a8efba66df7e6f9299
SHA512

0b364d22285761a2e862f0a4e9cdd5f94817b5aee28770ba9040f25b5f97bbe1a7f3312aba7a01f947634d4a7fafaf4ad4a82871a048d14e303369d0b80019de
SSDEEP

768:/4xbJl2tkiv7t1Ujs+fH16lWW0yBH7aQwyGdB2O:/cbvAHUIMHxW0yBH7WdcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38deee36975019af0cd44e9de717a0e2

Files

38deee36975019af0cd44e9de717a0e2
.exe windows:4 windows x86 arch:x86

0db7bf7d6959e299233fb0c4de1fd85d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaLateIdCall
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
ord612
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ