1b76ea4cefc2022fef0e60b5a098d0d755598e0c59dcc1b4bf1e339c65837e69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b76ea4cefc2022fef0e60b5a098d0d755598e0c59dcc1b4bf1e339c65837e69
Size

240KB
MD5

0085d1dcf101235090f83b1d654d5ad0
SHA1

4f8d9e5a96d810e4dfddc7a0b1e741d6e65e8fe7
SHA256

1b76ea4cefc2022fef0e60b5a098d0d755598e0c59dcc1b4bf1e339c65837e69
SHA512

95ab1b6bea84876fbe277ce0195b37672bfcb25e48da56971d4b1e1e225707924b198da4ffecf51d620f7000a2b78424abd0cae6302f45d17a11d8f2fc46912b
SSDEEP

3072:mubIEXZD3fIWgyBXmUQO567l8GmVx3nejvZJ7xU0fT2c53wbiwY/bqtR9lWed:m6hL/6hIx30RxrfT2ccYzqtR9ld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b76ea4cefc2022fef0e60b5a098d0d755598e0c59dcc1b4bf1e339c65837e69

Files

1b76ea4cefc2022fef0e60b5a098d0d755598e0c59dcc1b4bf1e339c65837e69
.exe windows x86

f5588005132c133e218d97794e1f28f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord593
ord594
ord595
ord596
ord305
ord520
ord709
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
ord712
ord608
ord530
ProcCallEngine
ord644
ord537
ord571
ord573
ord100
ord689
ord610
ord612
ord613
ord616
ord617
ord619
ord544
ord547
ord581

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE