c1c1bf7b4f7baf39d1fb34d0ba76afa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1c1bf7b4f7baf39d1fb34d0ba76afa1
Size

48KB
MD5

c1c1bf7b4f7baf39d1fb34d0ba76afa1
SHA1

02ec335fbc5d92f96205969b4a7fce5e32b5893b
SHA256

1afc3ed81f0fd07ef7221e8077aa62d558ff4fb08c2d4fe9803d12c55037204c
SHA512

dce1c77a6b9fb5b3cba5f4be2b0092bd63576c7d59d06a3987310247f603d959afd4d3dbcfc3cb5870bd7a8355c1374bf8ccb025434b1a85aefc304dabb7741e
SSDEEP

768:jksk976C4K+2I93aHtJ0aTm6FTa3M4lrWcbk43g8gWJgHYAvUsM+d:IAlIFTc9rWcb73g8RaJnd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1c1bf7b4f7baf39d1fb34d0ba76afa1

Files

c1c1bf7b4f7baf39d1fb34d0ba76afa1
.exe windows:4 windows x86 arch:x86

85b36f28d1eb8bcbd8df076fad3d0875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaFPException
__vbaUbound
_CIlog
__vbaNew2
__vbaVar2Vec
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaAryLock
__vbaFpI4
_CIatan
__vbaStrMove
__vbaUI1Str
_allmul
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ