3e79c5021cb0bf8c7be3d3c8a08a4b22185afa883247d85d60ba7f883fecc9d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e79c5021cb0bf8c7be3d3c8a08a4b22185afa883247d85d60ba7f883fecc9d0
Size

508KB
MD5

10be3f47df397abd394ba59ab6acf355
SHA1

34922d6788ea1367e65adf2ccc7461749c0f14ae
SHA256

3e79c5021cb0bf8c7be3d3c8a08a4b22185afa883247d85d60ba7f883fecc9d0
SHA512

399c9755c4ecd032c08f0473b2d8a0f5d51e56f9aa9cf1306baeab6a9a58bcc571e55427ed09ac1978534ff64876ed58959696c0c183c9a8fed1994116d9a5cd
SSDEEP

6144:zH3CLjZYAOphO6G1a/qnvmDPFlmj/ZHzGNJWaQQZL:zXC3ZvUc6C0qnv6FQ/ZHz+JMQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e79c5021cb0bf8c7be3d3c8a08a4b22185afa883247d85d60ba7f883fecc9d0

Files

3e79c5021cb0bf8c7be3d3c8a08a4b22185afa883247d85d60ba7f883fecc9d0
.exe windows:4 windows x86

1926cf7b16f54f9660c0ae3c98cef637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord595
EVENT_SINK_AddRef
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord100
ord613
ord581

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ