bbcbab00e8cff0553c47bc0bdde5bb3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbcbab00e8cff0553c47bc0bdde5bb3a
Size

137KB
MD5

bbcbab00e8cff0553c47bc0bdde5bb3a
SHA1

29c72089c524276829b648812c5f54e0c7c4149c
SHA256

9a51172eb6675bc45f49ff9a81081baeaa096f2de9c497d0f5d8ac0dbd1ab90f
SHA512

4572a98ce338c892f7460756a8bd341c469ffb0ac0b6aec63dacdf5f927b388ba68da75297bfc49d5ae9de856a4291734892b367bf6ab6c2e3f14a7404929da5
SSDEEP

3072:aGxJMaEcPWPR3jVn/xQPoHgRGGSJSP4Ppkhtz92RAcmfpQkhHSDf0jkuSyewv:aiHBM4PYkz92RgpQqSI5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbcbab00e8cff0553c47bc0bdde5bb3a

Files

bbcbab00e8cff0553c47bc0bdde5bb3a
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 129KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE