00b8c5d8b9a63ec68c1d1c8e3296e52c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b8c5d8b9a63ec68c1d1c8e3296e52c
Size

24KB
MD5

00b8c5d8b9a63ec68c1d1c8e3296e52c
SHA1

2c9eb6b9f0a6d8d87782e8159b01c21102ff537c
SHA256

8eb3189b09b190ee9ce22c48f5dfb2d873b399403cf0189a3333279d78b75873
SHA512

5f21b4bf457eb6f8171775c0b7e8427799c6ffb258ad73bfa20659b08bfbb1ac1d2210487e60f4113e2e77b1c9f4f738ef1ec7ecd23321211ab540483bddd5c8
SSDEEP

192:fMuExdW+kcIG0ByAJ1JFpOf11y2zdo5TIFVatdwoT9WoA97GUbuuDyvbIu44FUTN:EJdDICUatHd0LiSUF97L5yTE4nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b8c5d8b9a63ec68c1d1c8e3296e52c

Files

00b8c5d8b9a63ec68c1d1c8e3296e52c
.exe windows:4 windows x86 arch:x86

38571c91b3acc57064f654e66b67c73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ