1adb5bb12946effccb92e76c6b67880d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1adb5bb12946effccb92e76c6b67880d
Size

607KB
MD5

1adb5bb12946effccb92e76c6b67880d
SHA1

d4c2e0681eafbc143990fdd2c56221ebe5b17371
SHA256

7de6a6fc85618ffd42857c7e26541c212315249452a9985561937582090c8516
SHA512

113330a1ffa0e83b5188b60c1385218559609d48c98e58df83ac2b215093b42ca47eb44829ae9b89d1bc8642e03f4fc124debae3e341f66a320854fb68924828
SSDEEP

12288:R7QYwm71Ov6hvBWOgAoPIg7npevpdpYifvrmI2I34ljjm:RCm06hB92Ig7CfjCdIoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1adb5bb12946effccb92e76c6b67880d

Files

1adb5bb12946effccb92e76c6b67880d
.exe windows:4 windows x86 arch:x86

006ea31331bd11c342885f688fe10442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm67

MethCallEngine
ord516
ord666
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ