fd512d00bdc0c8da96715757cb44b9f7bf1482cc76265d439bb55a3095e9d168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd512d00bdc0c8da96715757cb44b9f7bf1482cc76265d439bb55a3095e9d168
Size

612KB
MD5

e0ee1d27cd97f22dbc798430aa02b88d
SHA1

9d1d422600bb6490b08f2f39f5b1dd51421476d3
SHA256

fd512d00bdc0c8da96715757cb44b9f7bf1482cc76265d439bb55a3095e9d168
SHA512

b601ac5699a7f87160f8469825d622044ae207dacdcdbe8b2ef506a7381abf334514fc5236d1db844a81adf6b229eba4411d1019ac03e8082751a00880b0114a
SSDEEP

12288:hAmUiHiVeF0qJfO5B4lN9Bjd5+CsdRXx3V3pX5Rzsob0FCzq4aIy:hdPoANPdNsdRXx3V3pX5Rzsob0RnIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd512d00bdc0c8da96715757cb44b9f7bf1482cc76265d439bb55a3095e9d168

Files

fd512d00bdc0c8da96715757cb44b9f7bf1482cc76265d439bb55a3095e9d168
.exe windows x86

901b3bf40def7b5232fba69391476b4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord585
ord695
ord588
MethCallEngine
ord516
ord519
ord558
ord593
ord300
ord595
ord596
ord303
ord598
ord305
ord306
ord705
ord520
ord309
ord709
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord608
ord531
ord717
ProcCallEngine
ord645
ord570
ord648
ord573
ord681
ord576
ord685
ord100
ord579
ord610
ord612
ord613
ord616
ord617
ord618
ord619
ord544
ord546
ord581

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE