c0b7c380fcdc0bc82662a4df92f6c13a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b7c380fcdc0bc82662a4df92f6c13a
Size

149KB
MD5

c0b7c380fcdc0bc82662a4df92f6c13a
SHA1

e344ce21b8f273ee225b98618c5bf023ab7f3366
SHA256

ec817118680be1f3ba04141e3374448baf1921cfac82814fdbdf001f963b0413
SHA512

aa449c1c2e1888699b5839815f4f5c5ea31477cbd6bb766355c92ba3b6d7c7148cafd77256e6b71e9f7c4c2bd5bb36b2bcce64a77ab7460c5cea1f5517dc645d
SSDEEP

3072:BS38omg38y3P/cAQ5zN1SjhTfatjL9RaMHzt7g5IgiIyebBaDIi:fg9Qh1Apat3H9TtXgiI9eIi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b7c380fcdc0bc82662a4df92f6c13a

Files

c0b7c380fcdc0bc82662a4df92f6c13a
.exe windows:4 windows x86 arch:x86

c03148cf324f72b22df3dd8910391b62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord645
ord570
ord648
ord578
ord100
ord617
ord581

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ