f1327d1f29616b41a05ee2702dc4b730_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1327d1f29616b41a05ee2702dc4b730_exe32.exe
Size

120KB
MD5

f1327d1f29616b41a05ee2702dc4b730
SHA1

034240d74fba9eec88557b76e063659b2f5d7601
SHA256

ed07154a5818b88490b29ae3b9ce101b41927319aec00432d0f460ac32e5dff0
SHA512

4e5c79af16193e5c034cb9db6e2869abd2e841363faa38816f41db282f9e1623c8fa341473f8b3bb0e8b0f53625ccbd6aa7636a3907a85c411e793bab9640418
SSDEEP

1536:CPVo8ur4stmPEU+mcsI7Sih1aazW+7osZZBSJgMjMVNxwMK0spa:0uUwmdi6SWNs/MwJpK0spa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1327d1f29616b41a05ee2702dc4b730_exe32.exe

Files

f1327d1f29616b41a05ee2702dc4b730_exe32.exe
.exe windows:4 windows x86

ea0935697a8e72065c02e5b34d239888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord553
ord557
ord558
ord669
ord702
ord598
ord630
ord709
ord633
EVENT_SINK_AddRef
ord670
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord100
ord613
ord544
ord545

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ