3c7ddc7ae2e502fca72b2626ef0f6a8d | Triage

Sharing

General

Target

3c7ddc7ae2e502fca72b2626ef0f6a8d
Size

20KB
MD5

3c7ddc7ae2e502fca72b2626ef0f6a8d
SHA1

e319a050c2ec3ff32064cc7db54f6fd400a0234d
SHA256

a88897a4da999ceb415df1220001d0e704ca2b4a265f61409209e717ea90eb8d
SHA512

080266923198a2fb92c8cdcf9238aeff7f2e9e5d5e3283b3cde3f145cca55e7f19be9c08b750b0e06f0a8b96326a990c2a3da432593debe26871238d9c271f96
SSDEEP

192:/T0bABznOnhqO5lJn7ED3Z44m8GuqqwyDW4ny:/T0b+SnsOV7ED3Z44wu/nDW4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c7ddc7ae2e502fca72b2626ef0f6a8d

Files

3c7ddc7ae2e502fca72b2626ef0f6a8d
.exe windows:4 windows x86 arch:x86

7d48c44da7f1ab1e11c5fe7289c700bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaLineInputVar
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaFileOpen
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ