cb8c954f06aa68fb60af018209c0a815 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb8c954f06aa68fb60af018209c0a815
Size

167KB
MD5

cb8c954f06aa68fb60af018209c0a815
SHA1

bc2c035aebadc434887f6e74a8dfe94cc84d268c
SHA256

23081c8afdf81dd9e2dca791a9202a1c72ebf0de71075541c39aadadf8130e9f
SHA512

aad3998dfbcbfdf1347e68f60459f2eacd93e425d43a389099bf6a0cb306fa24414cc565b14141e7e61345a109fae484de3185208a027dc5bb39340138a21fe9
SSDEEP

3072:FApoJTnD49zjmBaN86CevHxb3HptoasSZCLYgMX86dxqfXcg1:FApkTDuuBWF3pttFZjqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb8c954f06aa68fb60af018209c0a815

Files

cb8c954f06aa68fb60af018209c0a815
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 150KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE