7288697c6565d6db8884efe18a9489986288d031709860b642ce462c15417cfa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7288697c6565d6db8884efe18a9489986288d031709860b642ce462c15417cfa
Size

820KB
MD5

5ec674e676a6fe802de0f2c539482cda
SHA1

9a26cabd2e2b854954f4b02fcb8577b7d0e9e568
SHA256

7288697c6565d6db8884efe18a9489986288d031709860b642ce462c15417cfa
SHA512

4d3fc51c6f8645ee3c45f77070e6b8e8bc2f2d0f5c5f153a314c70e643a104fbd5f59e50f44d7c04f1efe180f1bd10b086d78790a1ab4e300d0b35d86a61297a
SSDEEP

6144:GPYrmXhIppphFpwOtjEteEVUClZmEF+3ox5z9GVY8m9oKLrZW5H5uraCJMU7YucJ:cAmS3PQeGNF+QJGK8mzs5H5x48uNn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7288697c6565d6db8884efe18a9489986288d031709860b642ce462c15417cfa

Files

7288697c6565d6db8884efe18a9489986288d031709860b642ce462c15417cfa
.exe windows x86

bda9074dc42d6e4cad6eee598195e75b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord588
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord660
Zombie_GetTypeInfo
ord300
ord595
ord598
ord599
ord306
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord716
ord717
ord319
ProcCallEngine
ord644
ord645
ord571
ord573
ord681
ord685
ord100
ord320
ord321
ord613
ord617
ord619
ord581

Sections

.text
Size: 712KB - Virtual size: 709KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ