d4e4046a33c524c0bbc6df6a2ff3d71d | Triage

Sharing

General

Target

d4e4046a33c524c0bbc6df6a2ff3d71d
Size

20KB
MD5

d4e4046a33c524c0bbc6df6a2ff3d71d
SHA1

a9781d907937f6f54b4bdf5c0428bf54ab392b34
SHA256

9422c80b3f354c5ae2c6a2b48566fb64bc84a39c07a64df836d9b33fe286919d
SHA512

d3192c11c99bf6fea7d7f8411cb0e5419374bd7708928c45a0a07cd8a61681a473b34e5f2dfdff2976f86b73442db4c41419ae250e21001c98b083d6bd1abd03
SSDEEP

96:rd7UjIBgZ36l+TuO2c61F3xORirNQ5mDVdD304/GNKEi2:xCxZKMTuOB0ORCjvD304Wi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4e4046a33c524c0bbc6df6a2ff3d71d

Files

d4e4046a33c524c0bbc6df6a2ff3d71d
.exe windows:4 windows x86 arch:x86

ae2e9e87c166c3e6d0aea6f140e9abe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaExitProc
ord593
ord594
__vbaOnError
_adj_fdiv_m16i
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
ord525
__vbaChkstk
__vbaFileClose
__vbaStrCmp
__vbaI2I4
DllFunctionCall
_adj_fpatan
_CIsqrt
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaVarCat
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord648
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarCmpEq
__vbaStrToAnsi
__vbaFpI2
ord616
__vbaVarCopy
_CIatan
__vbaStrMove
ord619
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ