cf41456203eabee2291812757ec5053271b0a63f509176563974eabaebf1be24 | Triage

Sharing

General

Target

cf41456203eabee2291812757ec5053271b0a63f509176563974eabaebf1be24
Size

108KB
MD5

82e003129c340d925873c6c9d565c9b4
SHA1

fa8c285282b6dfa2e18b3d659577782239190957
SHA256

cf41456203eabee2291812757ec5053271b0a63f509176563974eabaebf1be24
SHA512

58a52b9c0acb1fd33c10b379c4a9f7000baf0c91e93e8ececc76c9cacac517923d8dff78557d33beaadf0017f855396a782df8566266f3d1fe4d3508ce6f0d16
SSDEEP

1536:/lSJ3Z3zfelID48UpehSsG/2wtf1CYp4flOf/r5dp9GUu8I380viyXOdf:9U3ZDeli4RMhSsOjtYciA5dep7zJ+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf41456203eabee2291812757ec5053271b0a63f509176563974eabaebf1be24

Files

cf41456203eabee2291812757ec5053271b0a63f509176563974eabaebf1be24
.exe windows:4 windows x86 arch:x86

2428699af651b183d04d17b90c0d74de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

_CIcos
_adj_fptan
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaFpI2
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ