969f133d61986ccccfdfc4c6f746b867 | Triage

Sharing

General

Target

969f133d61986ccccfdfc4c6f746b867
Size

500KB
MD5

969f133d61986ccccfdfc4c6f746b867
SHA1

71075f4b24aafd1339627dee3f7531f12fe60938
SHA256

cc756b37d620316333438196441d932dba6748092b17a162eded5ba4bb4689fa
SHA512

8abadbb818d3d6e320f9df3e8b19e0322c30aa8d50701a7b5806f6f731558f43fec7c5c8acb8d59a1d80cdf95a5c5931926bb8df4841889ec2e33815b0d9e3eb
SSDEEP

12288:AggTl+IQtTDtW70TsVK5bfeaUmKcc7HIUriC:2lGtAdK5WaU4iri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
969f133d61986ccccfdfc4c6f746b867

Files

969f133d61986ccccfdfc4c6f746b867
.exe windows:4 windows x86 arch:x86

3f60f9a41db19dc6eed6c63169eebc38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaVarIndexLoadRef
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaVarIndexLoad
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
__vbaUI1I2
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaVarCat
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
_CIatan
__vbaStrMove
__vbaStrVarCopy
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ