159f290670a3dd6e917cd66584d494ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159f290670a3dd6e917cd66584d494ba
Size

84KB
MD5

159f290670a3dd6e917cd66584d494ba
SHA1

5ea0f0d6d1e9495753c9a28cd83e6fd9e74d5edf
SHA256

75e4ffa3ecc186d41ffa53fe5a2bed70d254457b3fee850c646cef09089dd294
SHA512

4fe88b5ace19ec52179fb0192231ef2c6352572b06fb2db51038be39c785db75eda439d69083747c78402125f6bc501fddda828628c77860e86c6e4bf2795131
SSDEEP

1536:Z/7SeQFv1Vvhj0Zkw6nQ9Dik+KOopYoZf5a8MQVFT4vk2DDuJgAamtlZEOUdH:ZTSBR1lR0Zb6Q9DizopxZBabQVwDMOmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159f290670a3dd6e917cd66584d494ba

Files

159f290670a3dd6e917cd66584d494ba
.exe windows:4 windows x86 arch:x86

5ad2ebf067a137a5fe8ae1a1ecba87fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord648
ord685
ord100
ord616

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ