8fb18e8bfe3035f3850bec26397d4d5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fb18e8bfe3035f3850bec26397d4d5a
Size

12KB
MD5

8fb18e8bfe3035f3850bec26397d4d5a
SHA1

da62a44f88f1277d7aa3241fae20fc7eb5175e15
SHA256

a926effacc1c0e0ab9eebf89b3aa1bcbe6dd590b3f98e82b524ee26184679004
SHA512

18dd9687cc010892d20039eb7cfe9bc61a2878c9fb3d9a01b70074a1deaa7fcdcb6ef4f1014b27c35d8830a951db74d69c6c21d2d06a533a5abf3a9aefd333f7
SSDEEP

96:eGRdGolj1rU5yUuGCFB34RvHRUIFlXrbW:CE9U5zy3L+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb18e8bfe3035f3850bec26397d4d5a

Files

8fb18e8bfe3035f3850bec26397d4d5a
.exe windows:4 windows x86 arch:x86

cb9f2cc25030d3c2960b493d21ea0cdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE