7c91b5cbfa42fe6ba9084b7c749a9cf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c91b5cbfa42fe6ba9084b7c749a9cf5
Size

28KB
MD5

7c91b5cbfa42fe6ba9084b7c749a9cf5
SHA1

2185e3ff187412888be64b11ad041119eb13429a
SHA256

ddfc8e738b668f3b9ac3d6b58438dd0f284ed9103a02ef7e442921a8efe842d9
SHA512

ea7726a508d8071ef8605e21e8c1ee5194cd99d596b6b56f324f3585e565038f1a9671aa6d0f3dc86c294f3a221fd277f6fbd4b2228170e38e1268f5b9658472
SSDEEP

192:4YFC7lEvlzaJ9WVfV7lla3P1YBmAbzKBurpOTkvGnnD9sayEM7lle7lEvlzaJ9Wh:4sC7la7lYtKmPNwGnnD9s2M7lQ7l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c91b5cbfa42fe6ba9084b7c749a9cf5

Files

7c91b5cbfa42fe6ba9084b7c749a9cf5
.exe windows:4 windows x86 arch:x86

c71b0f1d411f6bbff694ec05a4ea1fad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
ord518
__vbaVarCmpNe
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord645
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ