14b40beb3d916473d25dbd5055ee86a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b40beb3d916473d25dbd5055ee86a6
Size

64KB
MD5

14b40beb3d916473d25dbd5055ee86a6
SHA1

66bb16ba7e2d5e3a6b8e50e77111211b9b1de38a
SHA256

12e81b7bd0ba6ce1226c331b62e4084998d06e04cf97ff2ab1737beb10fc088e
SHA512

a5b95acda4681fb0c028de430b32f94bdc6ae5715fe240507930792cf78f80156c0a4720eabc9f93bc72344683ee345edd99415049edec33a218e135cdc4cd34
SSDEEP

768:xZXtV+2p5dk927t7zfaaXukpZMPrrNbKg1QdMiuc6bdU:H9IH27t3cDR2juc6bdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b40beb3d916473d25dbd5055ee86a6

Files

14b40beb3d916473d25dbd5055ee86a6
.exe windows:4 windows x86 arch:x86

2e50e8576db1d6b7032e43d780f368da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord693
MethCallEngine
ord516
ord518
ord626
ord593
ord594
ord595
ord596
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord717
ProcCallEngine
ord535
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ