099bf52b24345abc94985fc256ea0ea1 | Triage

Sharing

General

Target

099bf52b24345abc94985fc256ea0ea1
Size

176KB
MD5

099bf52b24345abc94985fc256ea0ea1
SHA1

13a67fc4505cf7b7cc2d0b04c7f7285517cec48b
SHA256

bdd26991f90e1fe2438ffb7787b03b4041551778786a987f001783340ed128f8
SHA512

e033589ec266426f4756ab0b21a1eb925480f0fa4bc19fd3dba48d3cc5b77bc5e2c400f5bda144e7527dd92e5cb886ecf53f4a66e97b9f7bcb1c69941b8a9c7a
SSDEEP

3072:u7Qu53L2qq0Z8k93xF26rBSPoV+gRh8BqelFW6++0vvOTYsSNwR9q5n:gLHq0Z8k92iBSPoV+gRh8celb++0vvOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099bf52b24345abc94985fc256ea0ea1

Files

099bf52b24345abc94985fc256ea0ea1
.exe windows:4 windows x86 arch:x86

395e86241dd6cf52eb0fc5cebd901eb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord518
ord666
ord667
ord669
ord598
ord632
ord526
ord529
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord712
ord608
ord716
ord717
ProcCallEngine
ord644
ord570
ord648
ord576
ord100
ord616
ord617
ord619

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ