37f1b18c94f08335a7e42b4c71e25a20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37f1b18c94f08335a7e42b4c71e25a20
Size

24KB
MD5

37f1b18c94f08335a7e42b4c71e25a20
SHA1

90dcc73a2992b085d3ed10478ca0ff8e38e5c55f
SHA256

e1af70f08c635e469265345724673ad140808e162ee50c0b669a180b5cd6abab
SHA512

2ed9c8a00723e62f73741a5d819a76e8d7734d578be0f0bf5f6a09c98f518254ea726f1931b3d565c596292118d3e79587be1960fc12225a792f11732f22bd5f
SSDEEP

192:rHSXhAlBbayzd4JA4Rk3GM98bw0EiBl5D29FEH:DSX+BZSJ3RLdEiND2YH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f1b18c94f08335a7e42b4c71e25a20

Files

37f1b18c94f08335a7e42b4c71e25a20
.exe windows:4 windows x86 arch:x86

e2f35a0897d2752de8e8eebd7085b1e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaCopyBytes
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord599
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarAdd
__vbaStrToAnsi
__vbaFpI4
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ