ac2192df5b407bd9cfeb78f568809a98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac2192df5b407bd9cfeb78f568809a98
Size

20KB
MD5

ac2192df5b407bd9cfeb78f568809a98
SHA1

93c202289c46b2433c6e6c3498ad19a7df10f491
SHA256

92c3d958fedd6c844e581591ec6b53bbd57142da20156f9011399bd7af452adf
SHA512

38afd00a0c95e1bf715aa2c7740374ff60068806b6e5353791d191059c58f2ee4528974e1f6a88748b2896e6645c9c3577b6d57cedf2b0aaef121fc0ae1bcd86
SSDEEP

96:/lxu2yDNMsgovYIgJQC14dydiArjZAngt2XfovVnnH3X3X3X3TP3vFB1Tylmr2:/Tu2yT1T24dydjryu2yVnHnnn73Qlmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac2192df5b407bd9cfeb78f568809a98

Files

ac2192df5b407bd9cfeb78f568809a98
.exe windows:4 windows x86 arch:x86

58366d228407565879586506dca33a78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord529
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ