9b70e7f86ee498f671a8b764e0ddafb04722e0be3b94a168cc62cafbff24c8f8 | Triage

Sharing

General

Target

9b70e7f86ee498f671a8b764e0ddafb04722e0be3b94a168cc62cafbff24c8f8
Size

40KB
MD5

ecec3f19d92c9f9266c9554dcbedd7c0
SHA1

780e2fbbf980d611700ea2d7a5cec131307c18df
SHA256

9b70e7f86ee498f671a8b764e0ddafb04722e0be3b94a168cc62cafbff24c8f8
SHA512

972bd2e274e62ba1b1fc0dc6b475250e3f4245e0f7256d5a02940d5d914865d1736cdc7babf92069809de47097d5aad81988feb0fa391ad62271d7e53a531533
SSDEEP

768:WwYOuZcH36GPh8m+NwYbZPjL4J6GxKpJrVEJ7hh2bcorx5QxbjmmyCOgwY:W5FcKSV+N5b1f4J6m7h3xbjmmyCOg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b70e7f86ee498f671a8b764e0ddafb04722e0be3b94a168cc62cafbff24c8f8

Files

9b70e7f86ee498f671a8b764e0ddafb04722e0be3b94a168cc62cafbff24c8f8
.exe windows:4 windows x86

041ce13a7857c2e453e0b8d309be3d82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord301
ord595
ord303
ord304
ord598
ord307
ord309
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord712
ord608
ProcCallEngine
ord537
ord685
ord100

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ