d65be58c217354ff1e20148e9ea48397 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d65be58c217354ff1e20148e9ea48397
Size

76KB
MD5

d65be58c217354ff1e20148e9ea48397
SHA1

46a16cfe4ca44fdcc45b9a0b7691f48cc20dca05
SHA256

ff99b1a691e387e9a6cf6db815755a2994b53e6356c01666ea8b78dde03421db
SHA512

25225e3df0c63415593747e53fbf8cb4ee731ea60db0a87dee6328842ac06fddfa8236517c3bed41c0bc5dbe0302ebae758e6c4ad445739159dbfd8a094b134f
SSDEEP

1536:/xRt1b/GTSrxnQKi5YwtM5puR0b1BFTVl3JhDnFSWECw:fb/GExnQKii3uR0FnLM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65be58c217354ff1e20148e9ea48397

Files

d65be58c217354ff1e20148e9ea48397
.exe windows:4 windows x86 arch:x86

5dff1eb8b238cbf3f49771f76b060bb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord534
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaStrToAnsi
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeStr

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ