18828fbb6b5a155c68160e7a6308d5b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18828fbb6b5a155c68160e7a6308d5b4
Size

20KB
MD5

18828fbb6b5a155c68160e7a6308d5b4
SHA1

996b9ad7f63277265238229753932cb7237a653a
SHA256

6d5cea0170a983aaa271ef4f6daee450379fecddeb8f236da36d9b0f1feade2b
SHA512

bbaa547a6a243da439f91ce4751218a85c806fa2b1eb96c4d3359a0286d188ac39dd2216822f9b725d771ca8de271d46af7184abc38c7e0ef540230b925727d0
SSDEEP

192:uBh/rWj9lUaxDjPj/lld3gOw34wd4Iw3xIS+Iw34wapIw34wR47IwqEX5gMjs:uHij7USbjd3geg4aS+IzpIU47XyMjs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18828fbb6b5a155c68160e7a6308d5b4

Files

18828fbb6b5a155c68160e7a6308d5b4
.exe windows:4 windows x86 arch:x86

ec7d6d792151e318b7730c48b2572fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord632
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord681
ord100

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ