90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
Size

80KB
MD5

1126c674cf791eae13e80b0fbbc3ff60
SHA1

012ea21a45ee3cd2bd3b3ef6ee3bd2bd00dd07e4
SHA256

90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
SHA512

a75fd2e6c8d89c2944d30417174e1c9f8a6b7b4b3aff355a45258ff9b19c38b2c20a230386445045a2bba0daf6090a3bdda461d575049ebf9ef152d0f949ab24
SSDEEP

1536:2IEJB0CHl1D5hSVRUSi/5/tc2edhWhtLyaF:2IEVHrWbUSi/xt3IWhLF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18

Files

90c824c68bb1094162cd3e998ede07d7f3572482bad167f96c2bf17a5690bc18
.exe windows x86

49a72025bad13b91780acfb70950107a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord553
ord593
ord595
ord598
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord716
ord534
ProcCallEngine
ord537
ord645
ord685
ord100
ord616
ord619
ord545
ord546

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ