ab26fed55d355606eea2717de2a9ac03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab26fed55d355606eea2717de2a9ac03
Size

28KB
MD5

ab26fed55d355606eea2717de2a9ac03
SHA1

c2cab7c80522df1a4c21ef32d9cc4fe92cd0d669
SHA256

2f6b1a445278947f4e111a61bf33a232cc9809c032eb23ae5bcc43d40dbebefb
SHA512

e596fcce74835eb214ce3d2043fb31dcc3dd6420cfa71f1fa7b239ec2c44cfe8e55a982682c80206c95164566066eb7efb8d1711199bd1ca7697d2402eb64192
SSDEEP

192:vhex+UU1YjN7uJW1cDphAkU82XGp7lwzfTf3CsD30s9WKNoWO:vYGgN7sxzkMO3CsD30s9WKKWO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab26fed55d355606eea2717de2a9ac03

Files

ab26fed55d355606eea2717de2a9ac03
.exe windows:4 windows x86 arch:x86

147adbd57766d5d10cd2436b13664454

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
DllFunctionCall
_adj_fpatan
__vbaFixstrConstruct
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaStrVarVal
__vbaVarCat
ord645
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaStrToAnsi
ord616
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ