981df654ac4e154e1b33a20192f7ec9f

General

Target

981df654ac4e154e1b33a20192f7ec9f
Size

88KB
MD5

981df654ac4e154e1b33a20192f7ec9f
SHA1

4f60b1e915ddc4fe3d13225bb2a43c3f05b18a43
SHA256

b8779cb96d474eff2c69a14558ac7dc14e8ed4f4d165177e7aab69caa63efe87
SHA512

ffc46e44923dffe5fc0ca13a65e787b14ac1639b22bc843a7705d98567482bc7a52536f7d50a41c50f8af2d9ddcb66baac6a13a636cd0df06c49b6f5b77b709c
SSDEEP

1536:R8JjNkDiu/IX84We7RV9bOrWHhBpvYv4M:RiaDiuwX84We7RDnBo4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
981df654ac4e154e1b33a20192f7ec9f

Files

981df654ac4e154e1b33a20192f7ec9f
.exe windows:4 windows x86 arch:x86

a0f88ee15d677f7d97673117b9e90d22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
M_vbaLenBstr
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
ord516
_adj_fprem1
ord518
__vbaStrCat
ord553
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaAryVar
__vbaAryDestruct
__vbaVarForInit
__vbaFileCloseAll
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaFpR8
_CIsin
ord631
ord525
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaGet3
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaStrR8
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaStrToUnicode
ord713
_adj_fprem
_adj_fdivr_m64
ord607
ord608
ord716
__vbaFPException
__vbaStrVarVal
__vbaVarCat
ord644
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaR8Str
__vbaVarLateMemCallLdRf
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
ord576
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarSetVar
__vbaI4Var
ord610
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
ord612
ord617
_CIatan
__vbaStrMove
__vbaAryCopy
ord542
ord543
_allmul
ord544
__vbaVarLateMemCallSt
ord545
_CItan
ord547
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.TEXT
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0f88ee15d677f7d97673117b9e90d22

Headers

File Characteristics

Imports

msvbvm60

Sections

.TEXT Size: 68KB - Virtual size: 64KB

.DATA Size: 4KB - Virtual size: 2KB

.RSRC Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 5KB

.TEXT
Size: 68KB - Virtual size: 64KB

.DATA
Size: 4KB - Virtual size: 2KB

.RSRC
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 5KB