70d5cf05893afde6a46e7fd6cce5a057584aad2be0c5d2f2e2dfb6786c147c1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70d5cf05893afde6a46e7fd6cce5a057584aad2be0c5d2f2e2dfb6786c147c1f
Size

20KB
MD5

8870742c5126210000734cfa31723aeb
SHA1

1d95537774ba7bdc8a37a3d80c6518f07d861a49
SHA256

70d5cf05893afde6a46e7fd6cce5a057584aad2be0c5d2f2e2dfb6786c147c1f
SHA512

4bf63b7667ebd31824762c163815bbd32760893844d826fc19ecdd2775857a1117f16bb45783b48e9ac7b030f88b284a74a16be6b3aa2c5e95419881d08a963b
SSDEEP

96:k8Q2im7YCZCoKVE3kO8n1KsTNADt4pl4A9W4XaabmG8CL3uSTdfBT4EZOZZ3Maco:bmm6NAp693jXTEA6kFWsHhEfT93jX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d5cf05893afde6a46e7fd6cce5a057584aad2be0c5d2f2e2dfb6786c147c1f

Files

70d5cf05893afde6a46e7fd6cce5a057584aad2be0c5d2f2e2dfb6786c147c1f
.exe windows x86

b32d3ec8a42e411dfa40f8b05183e11a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
Zombie_GetTypeInfo
ord632
EVENT_SINK_AddRef
ord528
ord529
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord319
ProcCallEngine
ord570
ord648
ord100
ord320
ord321
ord619

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ