5a00a25b20c0a2603cc1e1bdffaa375290509bbf1fea1cf233bfb0427b555b9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a00a25b20c0a2603cc1e1bdffaa375290509bbf1fea1cf233bfb0427b555b9a
Size

184KB
MD5

a05fba39b8759c5842c9e49d8778ee8b
SHA1

b09127dc6534e16eb71c581843f0ecc404e46df6
SHA256

5a00a25b20c0a2603cc1e1bdffaa375290509bbf1fea1cf233bfb0427b555b9a
SHA512

a5a1bd5819bf29d253f6c4bff2b3daae5f9980555fc6b75b58e89f179ef3d0cc126729b920714a3e9c7278fcc03ff972c38102099777c4ad535f246540c79063
SSDEEP

3072:ftpv6koif0t/d4lZW4hn8s7zBlvnqnxiu:ftfotl4lz8mzBlPqnxiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a00a25b20c0a2603cc1e1bdffaa375290509bbf1fea1cf233bfb0427b555b9a

Files

5a00a25b20c0a2603cc1e1bdffaa375290509bbf1fea1cf233bfb0427b555b9a
.exe windows:4 windows x86 arch:x86

011cb0ffa18c21b0bad9a7ac2c6df4c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvbvm60

_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
ord588
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFre
ord593
ord594
ord600
ord570
ord100

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ