0090868bef016c7fcee8152a3e917313 | Triage

Sharing

General

Target

0090868bef016c7fcee8152a3e917313
Size

88KB
MD5

0090868bef016c7fcee8152a3e917313
SHA1

1223c236f760b4cb91083012619eac3bbf1684e7
SHA256

04f031fd87d575024727c16cc3997ac214a9bf5a4ace95384a6f5be943d162f8
SHA512

97088f8431ae1b27a3f0a9eb570567bb880bda53311f323a46348bce1e3c5ea114c16f6a756a562637d94e078c37be528a454694acb3566a033e94c826d1953d
SSDEEP

1536:5yTXVPJs8/Lsc4BjwAKRCeO1OvOk1iwXaiaBGBa17vSy:5uVeSLAW0xcWQ7K1sMd6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0090868bef016c7fcee8152a3e917313

Files

0090868bef016c7fcee8152a3e917313
.exe windows:4 windows x86 arch:x86

db4d5cdcae31f78ae4b73ef0ae205e5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord593
ord594
ord598
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord536
ord644
ord537
ord570
ord648
ord572
ord573
ord681
ord685
ord578
ord100
ord616
ord617
ord618
ord581

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ