14dc1a08c5f64f7a0836213f6f31107b7c6dd3be303e19476894e781d1ae2388 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14dc1a08c5f64f7a0836213f6f31107b7c6dd3be303e19476894e781d1ae2388
Size

68KB
MD5

09f09c99d1390478cd2bed62c5c3ad64
SHA1

cbd80e70eda3bec973697a88e6924c5f904a71c3
SHA256

14dc1a08c5f64f7a0836213f6f31107b7c6dd3be303e19476894e781d1ae2388
SHA512

9efec7d9c5b680ad7e7a50cdaab11bd8d3c06a85df554518ea4fa4f7359b8791a0613a75029f966abfb277fc5fcec296057d37a15da666dcd32d2849596f1302
SSDEEP

384:gf6c6f0a9UA8k4G2fe3986ibG9fGRjta/kroaPTn:guhX4G4Y986fGRQ/MoMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14dc1a08c5f64f7a0836213f6f31107b7c6dd3be303e19476894e781d1ae2388

Files

14dc1a08c5f64f7a0836213f6f31107b7c6dd3be303e19476894e781d1ae2388
.exe windows:4 windows x86

bb6db8ac5f6d62f786b7da43995cc7f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord100

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ