de6c0ff6fdbf133dc221496857a19987 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de6c0ff6fdbf133dc221496857a19987
Size

384KB
MD5

de6c0ff6fdbf133dc221496857a19987
SHA1

c668268f3a96994cca4874c235add925c673c82b
SHA256

786e47dc0722c43aa840472c36f15da5d99b7f45145ddcbff0868b95a6268d21
SHA512

a5ad362cdde2281d39047a4662d0776a2bf6cb31dfce45ddfcf19dbe93e3880f9d3899dfad49db9dbd461f99165c8b178f6c5fcff182e037b84bec0ec0644848
SSDEEP

3072:BnJw6JwPtMTKD9pTlX9JIEDE+gujr2IveRkgOUfHusNb9JIEDE+gujr2IveRkgOQ:UXgqZX9JvoSb7U99JvoSb72gqZb3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de6c0ff6fdbf133dc221496857a19987

Files

de6c0ff6fdbf133dc221496857a19987
.exe windows:4 windows x86 arch:x86

a6299d2544227ad7125a44bdf61e4406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
ord693
__vbaFreeVar
__vbaAryMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaPut4
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord631
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord529
__vbaPutOwner3
__vbaI2I4
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ