08ff30b997606aea957926731289ce80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08ff30b997606aea957926731289ce80
Size

24KB
MD5

08ff30b997606aea957926731289ce80
SHA1

2324035dfd856829624da3c532fc80fc7424e278
SHA256

b128e4f33dcaf2d24e29dfe0881636251aed955f44e8b2f98c4fc843c135e38c
SHA512

39adfc05346fcc4b592b04e3fe9bea9e1f77b1fe427ecf976e43ede96df4579efddd8ac908bf7ad7b9d904b72ecd88fdf53597b21f90e3ed45ee3924c4e3e578
SSDEEP

192:gMW3+ci3+cuc17dijOONk0yDom2jFkJWlvl0HAk8Vwz67ENiT6:VWCV7+N6D3sZ4Akz6nT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ff30b997606aea957926731289ce80

Files

08ff30b997606aea957926731289ce80
.exe windows:4 windows x86 arch:x86

2a2aaf99eb2380ce071db5177f3df099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
ord529
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord645
ord648
ord681
ord100
ord619
ord546

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ