766d3b85e73ebb86c763d5bd49c2233c | Triage

Sharing

General

Target

766d3b85e73ebb86c763d5bd49c2233c
Size

28KB
MD5

766d3b85e73ebb86c763d5bd49c2233c
SHA1

5376cc9aa4ac3609ab5164d6748b9297303cab4b
SHA256

af0aba0fe2c8ef75db8b67b7da1855fdfc460d42ff856ab79d76ea63ee5f9d2d
SHA512

872a2039c0afef969f5668c44fc1243ab2e549a3177a97ffbd8d83b8d24c68b94b1c9472f0efcb6ae9563e0f28bbb3b4125fdfa9d627382e194de2b8819837af
SSDEEP

192:/TbRUNeTL3TNeTY9a76hZ/xsA469tINeTYc3kNeT:/TbRUNeLNeUkKaA4eINeUpNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766d3b85e73ebb86c763d5bd49c2233c

Files

766d3b85e73ebb86c763d5bd49c2233c
.exe windows:4 windows x86 arch:x86

cce0e904b9bbe39c85c3297e3ba42b21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
__vbaVarCopy
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ