cb1c1a3005ccaf3754386395791b53d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb1c1a3005ccaf3754386395791b53d3
Size

16KB
MD5

cb1c1a3005ccaf3754386395791b53d3
SHA1

61e3bff7eb0954cec87906c5f839a817e32aad6e
SHA256

71a1dbee5f5ca0af3074a3250631235f3b1f49f21cc83ce6acc51a1b001ea28f
SHA512

ae011ff1ba9f2f3568ab8e12c8b514801de70e0f1c31f533f6a80c08211763c596e8968f2fe9adf0da797779346710b542da9e7b47c8f300bb7eb2408d3f80c6
SSDEEP

96:/lx54DI63uPPsh0ohC0yzf908yVsCR72T:/TWDImu8Thi3osw7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb1c1a3005ccaf3754386395791b53d3

Files

cb1c1a3005ccaf3754386395791b53d3
.exe windows:4 windows x86 arch:x86

9b7ec28c9205d563ed21660ed0ae4280

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVar
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ