55a0887d0512bbf8671b48eeee29c86a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55a0887d0512bbf8671b48eeee29c86a
Size

256KB
MD5

55a0887d0512bbf8671b48eeee29c86a
SHA1

79a7f2ac909c136d2fbb9c20186861f0657894c8
SHA256

428a8b83bcbc52871b26e8e5182d247b7a15d3e9dea0b60354b2770a5b5be5ee
SHA512

e8fb9de7f9deb1870fa9cbf3c73bec744d664cd7b7592231ab7206cbd838e8f1a3a2b53ae04a46fa87b16d02e705ef62c5aed0ddf567867e3dfe8fed408fd707
SSDEEP

3072:v4XgIixZqpv1aqGGEWGxnY7cn6EofCG+2YFu5U4DubEcNEp2zurHsOwecw8rLlsZ:v4QIiKdGN7xnCyNFX8vca2JeINsyJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a0887d0512bbf8671b48eeee29c86a

Files

55a0887d0512bbf8671b48eeee29c86a
.exe windows:4 windows x86 arch:x86

92e0665c50be81b210411db1c2984c1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
ord595
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaVarCat
ord535
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord610
__vbaAryLock
__vbaFpI2
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ