1d2053063f92f3d00f744fb16404f942 | Triage

Sharing

General

Target

1d2053063f92f3d00f744fb16404f942
Size

31KB
MD5

1d2053063f92f3d00f744fb16404f942
SHA1

7f0dc04f5bdf280a2b5ef2eb3c0111db83b30689
SHA256

cb877eaf9ae7b196b4a6a43ac1a2e5423ca18e226dc9b6409a793eed427dabb5
SHA512

8dc1903258a85925f4f1e61de4b4c4cd596adf016a4ed70b7ff4559fc57d7c723d18e1b9e114cbac392fb45210c08e8c50a3c02b748cb035ce45dd55b01d4278
SSDEEP

768:rPj3dfIZfPIhDVWl8zHPHXyXHCzcHHvzQBdi9vc:rPifgFVWl4vUv4Wvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d2053063f92f3d00f744fb16404f942

Files

1d2053063f92f3d00f744fb16404f942
.exe windows:4 windows x86 arch:x86

1cb01938b76b509cfd5211e63abab8b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord648
ord573
ord100
ord616
ord618
ord619
ord546
ord547
ord580

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ