af6f5a01cb04eca5a83b8454544a99fa67bdeef5aa6daebdcd027caff8137433 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af6f5a01cb04eca5a83b8454544a99fa67bdeef5aa6daebdcd027caff8137433
Size

752KB
MD5

0115e143edd2c9c6213e3d661b69a43b
SHA1

1fda8c3c51ad2b5e898869165309ac83c33bcd3a
SHA256

af6f5a01cb04eca5a83b8454544a99fa67bdeef5aa6daebdcd027caff8137433
SHA512

1fff24118751104ddbc67db94188f36ecc5e4fd2f590369091a1a8172d73da99408b177bb80134eaff1c34c31be176419d43f8f75a70bd9efe4653cd2c7e0dc1
SSDEEP

3072:2YaAb7CcEQKoKc76abSwmbYaxYaqYab/YahYaRYahm4oOJW35jVY4wn:da9OSHEaeapaEaua+aoB15jWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af6f5a01cb04eca5a83b8454544a99fa67bdeef5aa6daebdcd027caff8137433

Files

af6f5a01cb04eca5a83b8454544a99fa67bdeef5aa6daebdcd027caff8137433
.exe windows x86

6d42e8be0f660b6914cdb426eff01b23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord714
ord608
ord716
ProcCallEngine
ord100
ord610
ord613
ord617
ord619
ord546
ord581

Sections

.text
Size: 740KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ