cc12fff49de33a50e8bab1f8672cd39d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc12fff49de33a50e8bab1f8672cd39d
Size

36KB
MD5

cc12fff49de33a50e8bab1f8672cd39d
SHA1

bb480fbd9f12a528b2f97ba40edc2d23808817d7
SHA256

4ff296fc87376ba1f0dfb0d773f55efcaa4b9d82a1f5bfa88402fdd6747b0f16
SHA512

93f94ff593ca607e7c5b60d98c94eff304085d228487c910c393ce6742467d0d2764b1b07dbe65fef3386f3400d1d8ac736db8aac4f7af4767f420599a7458aa
SSDEEP

768:eZUzi9wctW3333oW6LIc3Jm0a8GNTzWfsT55q:piW60nVC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc12fff49de33a50e8bab1f8672cd39d

Files

cc12fff49de33a50e8bab1f8672cd39d
.exe windows:4 windows x86 arch:x86

ebdc8c51edb8f7609de451d8fab164ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ProcCallEngine
ord535
ord571
ord685
ord100
ord616
ord617
ord581

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ