20dd8a861c0f4ee159a959edf71b11c91c3d6ffd83457bcf2e0ce57981fe7965 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20dd8a861c0f4ee159a959edf71b11c91c3d6ffd83457bcf2e0ce57981fe7965
Size

7.1MB
MD5

1f4e2b29a1081c9123a3f0299e70691e
SHA1

e60726e850242bb830da85721fa40fb4d704efdd
SHA256

20dd8a861c0f4ee159a959edf71b11c91c3d6ffd83457bcf2e0ce57981fe7965
SHA512

d31fb1da5407ecc6e306e9c8f0771a5c29da02b115770a7a5c39bc66f513932377848a48d7cb878710f74fd670cf5f9e3ef3eafc98a9f8c42c38cf34e1a0c5b5
SSDEEP

98304:kim88U15/7jONdi8hhoZOS2SKeJywoYxmMK7MJc4GIKLX:4MW4oLX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20dd8a861c0f4ee159a959edf71b11c91c3d6ffd83457bcf2e0ce57981fe7965

Files

20dd8a861c0f4ee159a959edf71b11c91c3d6ffd83457bcf2e0ce57981fe7965
.exe windows:4 windows x86

7691fdb9025d42c7d8a9df136472eb2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord588
MethCallEngine
ord620
ord516
ord518
ord519
ord626
ord552
ord660
ord553
ord661
ord557
ord592
ord593
ord300
ord301
ord595
ord596
ord598
ord306
ord520
ord307
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord608
ord716
ord717
ProcCallEngine
ord536
ord644
ord538
ord539
ord648
ord570
ord681
ord576
ord578
ord685
ord100
ord610
ord612
ord613
ord617
ord619
ord542
ord543
ord544
ord545
ord546
ord547
ord581

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ