18ee585e3df8f226e6cb1f95d326fea92496e6eb3101afd7de2cf1154ff123a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18ee585e3df8f226e6cb1f95d326fea92496e6eb3101afd7de2cf1154ff123a7
Size

24KB
MD5

a138c8eb8ae75e1b0a8c86addd63d733
SHA1

1b23500b9d41ff86ad75e10444f4627eddd4fff9
SHA256

18ee585e3df8f226e6cb1f95d326fea92496e6eb3101afd7de2cf1154ff123a7
SHA512

6d3d05268e5b428f20f2c867f793fd5d179282010e1e57e44dc1cfd9738ffe07a1df6f67c3060d6b651453c9bd420e1ce017b928b11506c5bc111ef8982aacaa
SSDEEP

192:C15ai9Rfb6wdeLphtzfKmFmS9HcbUDAswDrkozFqkL+daEQYN5ai9Rfb:C15aiDf2ddFZtcoDAjkonEfN5aiDf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ee585e3df8f226e6cb1f95d326fea92496e6eb3101afd7de2cf1154ff123a7

Files

18ee585e3df8f226e6cb1f95d326fea92496e6eb3101afd7de2cf1154ff123a7
.exe windows x86

fc3598635766d8cd4a238d2055bd1c0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord536
ord573
ord100
ord619
ord581

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ