1d1e55d56501a4c020359838798b5e9c[.]bin | Triage

Sharing

General

Target

1d1e55d56501a4c020359838798b5e9c.bin
Size

25KB
MD5

43cdb974d61e9217e95cb4f45e85c436
SHA1

d72d7a3bcf71838f82ecb24f6dd3595d54a72cd0
SHA256

7502748f75535a8c6ff441827f84efdae82d01cf522d9ea786b78b7780004450
SHA512

71ff5550adce13fe38fa99e4b41170748bde80eb8fee5a0ae7fb5ef32b35d4c0461cfd8eb5bbd42acd4b05d09627879071aba33c1127155eb2ec4d9c3bdabc43
SSDEEP

768:1B1W4275d8dSkdMK3uN94hq5aCGiRRmA2MCnt5KAzfey:124qOSUh+Nyhq51cfBfey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/3c8ae458a96eb7500d2c065c8232645ba3961e981bfaa1e4cbaf6f5d5558ee64.exe

Files

1d1e55d56501a4c020359838798b5e9c.bin
.zip

Password: infected
3c8ae458a96eb7500d2c065c8232645ba3961e981bfaa1e4cbaf6f5d5558ee64.exe
.exe windows x86

Password: infected

67814fc50fc21633690e8019e09509fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord593
ord595
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord535
ord100

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ