7ef93aaee2d45fff2ab8d9dc04937ea7f62eefc81bb4777b4b22c0c40c00b884 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ef93aaee2d45fff2ab8d9dc04937ea7f62eefc81bb4777b4b22c0c40c00b884
Size

48KB
MD5

6c4786e0ed1dbb6ee6081f04c66b623f
SHA1

5bccfe133e01461f276030c396881be3577434d0
SHA256

7ef93aaee2d45fff2ab8d9dc04937ea7f62eefc81bb4777b4b22c0c40c00b884
SHA512

8daff05cb689be3d137fb497a76877c06bf5a409f0e697ac1891766c08f0f28eb7542d22d3aee4719d9924ea1ccc3afe75bf9826cb30f5dd1d6be520e70261d9
SSDEEP

768:VQ2xecs03AscB03yay4owqoNokIWq3bvbzcV:Vjec/3xX3yayfoNoNNzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ef93aaee2d45fff2ab8d9dc04937ea7f62eefc81bb4777b4b22c0c40c00b884

Files

7ef93aaee2d45fff2ab8d9dc04937ea7f62eefc81bb4777b4b22c0c40c00b884
.exe windows x86

cfd6316f92705797a4e7898465018f08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord660
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord644
ord645
ord571
ord573
ord685
ord100
ord610
ord612
ord616
ord619
ord581

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ