b278dc416158eaaa43aa64289c3070d167e992e4ccaea96380add0add5f04759 | Triage

Sharing

General

Target

b278dc416158eaaa43aa64289c3070d167e992e4ccaea96380add0add5f04759
Size

48KB
MD5

730bf2d57d2003d4f76b8fb060f5c324
SHA1

ee185256963382654cd9412311d5a1e265e79660
SHA256

b278dc416158eaaa43aa64289c3070d167e992e4ccaea96380add0add5f04759
SHA512

98b89c2aa2d344065c2c54bca193f73a0fbf8416e7aa9e215617902426c727456e805c3afb4143485636b26ac6031ad4c2107fa2fae6a209bc0a5365bb1b2c14
SSDEEP

768:kByeTL8Wr5RWzKJ0WIhVoNoeIcsKb3Bzck:kAeTHWzKaNhVoNonGb3Bzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b278dc416158eaaa43aa64289c3070d167e992e4ccaea96380add0add5f04759

Files

b278dc416158eaaa43aa64289c3070d167e992e4ccaea96380add0add5f04759
.exe windows x86

b29203f487c7b9c008d17a046f15a1e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord595
ord598
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord644
ord645
ord571
ord573
ord685
ord100
ord610
ord612
ord616
ord619
ord581

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ