30ed8dd2dd7e5fdba512257e04f5f6c11cd583f26d87e6084d7c6e602e458ce0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30ed8dd2dd7e5fdba512257e04f5f6c11cd583f26d87e6084d7c6e602e458ce0
Size

8.6MB
MD5

894d58f59fcedabaa5521a6cbc184756
SHA1

30dd89bcc5333e9f5d673fc366081a07ee164644
SHA256

30ed8dd2dd7e5fdba512257e04f5f6c11cd583f26d87e6084d7c6e602e458ce0
SHA512

14f1a4c3b42d6d3c89ceb1437cb02270fccae88cb2713693a602ec9eb45514a02b543c6ce954b3b2cfb82cdd250236d79a78b03c464f353a5a03bac812aaa1f2
SSDEEP

98304:iixzZBvbEV7Vtkp6RF49yd5hsob5vf/DrQsUYHHsPNE2RuCR1XCXjx/b9cvXEn1p:dxzrI6wRF49yd57b9OzVuCRJKjh4g1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30ed8dd2dd7e5fdba512257e04f5f6c11cd583f26d87e6084d7c6e602e458ce0

Files

30ed8dd2dd7e5fdba512257e04f5f6c11cd583f26d87e6084d7c6e602e458ce0
.exe windows x86

7a1a603929400d27f0d5108aefdd25b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord666
ord595
ord598
ord709
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ProcCallEngine
ord535
ord645
ord570
ord573
ord685
ord100
ord617
ord618
ord619
ord652
ord546
ord581

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ