081ef032da16b134e7857216456a6c8c | Triage

Sharing

General

Target

081ef032da16b134e7857216456a6c8c
Size

94KB
MD5

081ef032da16b134e7857216456a6c8c
SHA1

0c0e0b20b2006949888f965099c427d0de407d31
SHA256

774bd38251e71d93389223266302846a4e446bb725a7f5693d1b7514084f004c
SHA512

6902844236f7abc9fb6201006219739a4307b127fd34b4456a49129fa3448ef3773977b93f0ab0762e8e9e4516a20811fd7562df62cc6b747fdc9dbc8f10a8a7
SSDEEP

1536:s1a7NUj17P/KDs2z/qZpDm9agjMugpnbvWgJvbOs5PzcNh6kD:s4UR7HKDsGiiagQugbvWgNb7lS4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081ef032da16b134e7857216456a6c8c

Files

081ef032da16b134e7857216456a6c8c
.exe windows:4 windows x86 arch:x86

9ab7d480d72238ba8555419f99f6cd33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord667
ord595
ord598
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord717
ProcCallEngine
ord535
ord644
ord645
ord571
ord100
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ