d4b32e2e5ee5272217111d1fa6614649 | Triage

Sharing

General

Target

d4b32e2e5ee5272217111d1fa6614649
Size

24KB
MD5

d4b32e2e5ee5272217111d1fa6614649
SHA1

50102097bc343a4f74be5cff370b530723be03b3
SHA256

edcc7c61ab088473245f7f7ce015c4d116eef7fb9c347905a9c8bfda03354929
SHA512

228e306c378cc27cd30278816e183a818c30dbf00e2be43883bccc68b269831fdf610176fe2b61a22190fdc62ad0a33b8fe1f9033f1fd682192a8ee5b9c0caf1
SSDEEP

192:mAOFQvLPqaPgyDDeNDd7p+7k8l7q1g7bX7gvlbhzD9ye1HbLPGOFQ:mAOFALPqaPgpNB9lD9yAHbLPGOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4b32e2e5ee5272217111d1fa6614649

Files

d4b32e2e5ee5272217111d1fa6614649
.exe windows:4 windows x86 arch:x86

3cdf379600c46f5639954ac6f50d246e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord666
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
ord529
__vbaObjVar
DllFunctionCall
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ