020839cffabaf23c8d46fdb6423df3cc | Triage

Sharing

General

Target

020839cffabaf23c8d46fdb6423df3cc
Size

328KB
MD5

020839cffabaf23c8d46fdb6423df3cc
SHA1

33d067b12a491c294b520d42d4133ed2acfc23bd
SHA256

d004abef4ca6ebca7ec75eb8d927bd4ae4257446474abb8095c1c18796f8e7a6
SHA512

b3e6fa31aa9ea9c9412020e3ba74aedc679540604456254a6eb2e3dd97463a3865cdfae788e32ec2b030a570c4ab121c5436d2e16f01b5ec1f1f13650e536ed2
SSDEEP

6144:FLHe3xf0mygk97t77TTfe4WIC/CMTAD082NA5L16Fp8tX8vs+E:F+3am5yvT4R/YDT2C1uutX88

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020839cffabaf23c8d46fdb6423df3cc

Files

020839cffabaf23c8d46fdb6423df3cc
.exe windows:4 windows x86 arch:x86

489e3bffe1f2de3af2d9399db0084f58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord681
ord100

Sections

.text
Size: 12KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.legion
Size: 4KB - Virtual size: 4KB