557c3cf36f97778f59c63620071591cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

557c3cf36f97778f59c63620071591cd
Size

7.3MB
MD5

557c3cf36f97778f59c63620071591cd
SHA1

6a6a967c22cdb281afd7b516d8bf34df8ce5c073
SHA256

be23d48d178384e8205e84b2d903c2cb7d24c40b637b5a56ae08a7dc9897c6b2
SHA512

3e14c53fac78d3ebebd9776b65faedb2e970e555e814196e2205f546dce455a5011a6ab3a116c993f11bf635acd845ba3b3b011547cd9c39ff6b48c504c61a59
SSDEEP

196608:YHp2MmikIt4iV0sUesC0ZIfa2Dty7A3PuFSLnx1KbpOxw/tqun39eDup/hhjvsu3:YHp2nikIt4U0sUesC0ZIfa25y7ePLLns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
557c3cf36f97778f59c63620071591cd

Files

557c3cf36f97778f59c63620071591cd
.exe windows:4 windows x86 arch:x86

0cd5cc1384ccb668393bd9bc2733bf6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
ord595
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ