866ba21bd88d9726c4aa6c078e25cc25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

866ba21bd88d9726c4aa6c078e25cc25
Size

20KB
MD5

866ba21bd88d9726c4aa6c078e25cc25
SHA1

92818a86b82199092f9cadd4eacf11b55f33ecb0
SHA256

d274d76370e22dc0493f59052c3d5423586b8804e46b105ed434bf7776260df0
SHA512

2cd823ed765b185d744d5e944f25e454dda1dda0a03d670811373d70f6c762c6585c3ab88a6cb452b0ff75810d7b46eb65fbc9c1965ff8024266cf5e8058b35c
SSDEEP

96:/lxzOvGR8c/cgchXeifBPVADGej1elWIS6+a4V2kKYD304A0eOWgZxq2:/Tz8c/cgMTZSqej1S3+a4DfD304zWKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
866ba21bd88d9726c4aa6c078e25cc25

Files

866ba21bd88d9726c4aa6c078e25cc25
.exe windows:4 windows x86 arch:x86

d3264c9b442666a4f720609f7989c71d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord712
_adj_fprem
_adj_fdivr_m64
ord607
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ