bba78549c7e1ad0910fe4ef33f769785f98bb1eca0515846ddf7236b4b6ea4e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bba78549c7e1ad0910fe4ef33f769785f98bb1eca0515846ddf7236b4b6ea4e5
Size

15.6MB
MD5

bbb33337763dc8234a9d97484f68926f
SHA1

266dbfdf89693e83f050ece9892bf9ed040ebfcf
SHA256

bba78549c7e1ad0910fe4ef33f769785f98bb1eca0515846ddf7236b4b6ea4e5
SHA512

05b531803fd91fbe199a19c770f9e6d0f1aacc9057ffadb97d155b25ffd35f797a30be1787011ab8074925f0b32a0ac5673b6f606493ffc5d82c10b53b83e2ff
SSDEEP

196608:FyvuYKixqi+oXJCnjLlVewr4GRsWrwszQhUDziLoEaN:FyvuYOjLlEwr4GRsWrwszQhUDziLoEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bba78549c7e1ad0910fe4ef33f769785f98bb1eca0515846ddf7236b4b6ea4e5

Files

bba78549c7e1ad0910fe4ef33f769785f98bb1eca0515846ddf7236b4b6ea4e5
.exe windows x86

458476a7302db15b9ee430c513adfa5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
MethCallEngine
ord516
ord518
ord550
ord553
ord660
ord661
ord662
ord557
ord666
ord593
ord300
ord594
ord301
ord595
ord302
ord303
ord304
ord598
ord305
ord599
ord306
ord520
ord307
ord308
ord309
ord524
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord313
ord712
ord606
ord607
ord714
ord608
ord716
ord531
ProcCallEngine
ord535
ord644
ord645
ord648
ord573
ord681
ord576
ord577
ord578
ord100
ord610
ord612
ord616
ord617
ord542
ord543
ord544
ord545
ord546
ord547
ord548

Sections

.text
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ