c0b99266bfa3248eab78fdab9512d548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0b99266bfa3248eab78fdab9512d548
Size

136KB
MD5

c0b99266bfa3248eab78fdab9512d548
SHA1

2791a2758e5bf63206df7090a2b234953066e610
SHA256

58fad0805bd22dbe46419d3a2c381bd9f439d2dc7f3685137ddad96920d638fd
SHA512

6bb209c2ccfbd7187126243f23d054ded55d1e18b8eb225610b5f8e9a0f9ffee60c1397539b68702da83f3831258c59e717a8da55be6365da7d99475ae704ac9
SSDEEP

1536:8eiP/sn+QgBZu/T9fQ/boMTSPBz8xbauvL7PNs:taXwCcMTSPBz8xbauj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b99266bfa3248eab78fdab9512d548

Files

c0b99266bfa3248eab78fdab9512d548
.exe windows:4 windows x86 arch:x86

d0a4d6a9a136f61f718f826e78483ced

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord660
ord300
ord595
ord596
ord598
ord306
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord570
ord571
ord576
ord685
ord578
ord100
ord579
ord610
ord612
ord616
ord617
ord618
ord619
ord652
ord546

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ