3b7ef5fc0f06df2188e6b1e8f6455bd9 | Triage

Sharing

General

Target

3b7ef5fc0f06df2188e6b1e8f6455bd9
Size

160KB
MD5

3b7ef5fc0f06df2188e6b1e8f6455bd9
SHA1

b0ee787e8919d384b8f4b039c88fd2e80257b78c
SHA256

e41d662e2af4b329d916dbef003723b7a850607b91256c7419e2cf268814cd27
SHA512

e0472d66079542f182cbc39b64e3eec84e4d302f4617ccf2b4a31edb180d2992d883e8d5218629debd86c36a53997b23061c2b00c3bd0765f8da220506c54d5a
SSDEEP

1536:bcyP8Cie865AOV8NFWcw57gwzp+QAsSdW:brP1bitNFWcwhgw8QWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7ef5fc0f06df2188e6b1e8f6455bd9

Files

3b7ef5fc0f06df2188e6b1e8f6455bd9
.exe windows:4 windows x86 arch:x86

48e6a7949febada96841664361d0c1c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaInStrVar
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ