1e47076cfbca05e29675a4b36f010c0db9f0200846dbe4c717f2f6082eb4a26e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e47076cfbca05e29675a4b36f010c0db9f0200846dbe4c717f2f6082eb4a26e
Size

76KB
MD5

d89a7ac9f5940ae7bb1636ce0812da06
SHA1

192b7ec8234dc0023d0dea1350936e1603b704f5
SHA256

1e47076cfbca05e29675a4b36f010c0db9f0200846dbe4c717f2f6082eb4a26e
SHA512

c5a96a874bb4428cfb2411d65f592585cd1ee85ea865faaa9072ce5d5a74e2c9a9a1da9511dd81d014b14c62a4b8221e7db0e82e3056861494dca8a07b812610
SSDEEP

768:EeNOwWn/HB8HMND8DBbYPxMceNOwWn/HB8n/:EeNCn/HB8HMNYDBbZceNCn/HB8n/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e47076cfbca05e29675a4b36f010c0db9f0200846dbe4c717f2f6082eb4a26e

Files

1e47076cfbca05e29675a4b36f010c0db9f0200846dbe4c717f2f6082eb4a26e
.exe windows:4 windows x86

1c1a4b4b4c223591342ce744d51f8329

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord587
MethCallEngine
ord598
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ProcCallEngine
ord537
ord648
ord681
ord100
ord579
ord616
ord617
ord618
ord580

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE