15b4a62dced66b47c303e116afa9d3cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15b4a62dced66b47c303e116afa9d3cb
Size

84KB
MD5

15b4a62dced66b47c303e116afa9d3cb
SHA1

5af5a382f51da442400eae487658c4fc9234a47f
SHA256

6dae3a0aec12d891c9a3f3bb317f09215c06ceb5fa8f723ed5f8db5d2c9d8b82
SHA512

2354feb9a193ecb3d681406ac785768d995c95bd4af3f13b2815d60d5cb92e537499641bf297dc9c2f94d2940d7655ed65787a6f0f7b54412a1980eb92df372f
SSDEEP

1536:osmdgfn2u16Lti8n42APNR2dcScLcPcxeTanuUHWOms3xxNMq39gk34iS5v:lOB4PNEdcScLcPcfnuS0hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15b4a62dced66b47c303e116afa9d3cb

Files

15b4a62dced66b47c303e116afa9d3cb
.exe windows:4 windows x86 arch:x86

9ce3e582d1635a9525889cb65965bc5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord516
ord517
ord518
ord519
ord557
ord669
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord674
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord541

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ