1f824b332ac715afdc692a32263d060c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f824b332ac715afdc692a32263d060c
Size

77KB
MD5

1f824b332ac715afdc692a32263d060c
SHA1

a0f849372eb8edead3d12c9caa46dca5a6bb61dd
SHA256

cab38fe092a8259ba0bc16070be7003f4b82a7e4bc3688af07439b082ba35e9e
SHA512

22d5de4fa981d0cb2e16c469df6c81ff0e2c861430173e3686ace5e4733ef2a4a1b4f8e4839d063d448c4dbe40b807332d1de541984c13c104695a600a253d06
SSDEEP

768:BUvpuICWd6tgHTDsGSxhe5jw4r/zqzrg18zYHR+zKnNzAtHhpIwVGDO9XNnJJkdo:1I4KE/P4rVCciMelhpIwVK2dJyhKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f824b332ac715afdc692a32263d060c

Files

1f824b332ac715afdc692a32263d060c
.exe windows:4 windows x86 arch:x86

defa7e30cf7ac17ea89dfaad24863d03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
CallWindowProcA

kernel32

GetProcAddress
FreeResource
LoadResource
SizeofResource
LoadLibraryA
FreeLibrary
LockResource
ExitProcess

msvbvm60

ord696
MethCallEngine
ord518
ord520
ord522
ord631
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ