117592462a617e20a549b904735e4aef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117592462a617e20a549b904735e4aef
Size

40KB
MD5

117592462a617e20a549b904735e4aef
SHA1

a617397513186e15374a6d63f6f48d00bdf10e12
SHA256

2619cc023065869b795e10263b71801f72812f4dc425cf57da220274dc14ab41
SHA512

c3e6901968dda5704fe00609ba7b2914ecf59d4ca54416ee92a18ba161e34f18dd8b39c7a6738c97898357ca57e3292d908e86bea8f72ea8bfc6f37eb2be0389
SSDEEP

384:ib9pBA8KTEp3T1PSeqdk+MI1sMIWX3js:Y9z/AwP2HGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117592462a617e20a549b904735e4aef

Files

117592462a617e20a549b904735e4aef
.exe windows:4 windows x86 arch:x86

aa257aac46ec9003f97781f360150352

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
::vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord681
ord578
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ