0720d4b0b6695a0a7fcbd93fc231ffa5 | Triage

Sharing

General

Target

0720d4b0b6695a0a7fcbd93fc231ffa5
Size

72KB
MD5

0720d4b0b6695a0a7fcbd93fc231ffa5
SHA1

e8d79d90c4a958049b679584414af6d0026dbabd
SHA256

eb0db22a9b7381fc772b363f376aeba238bc1a88e4c7174185139dad7cbd497a
SHA512

4e1b8c71639d787f38f05242afd6b5c386893e48eba0b187ac833a2a92a33e5c2d06b6b3426d370227bc3459e304e42b7ca3f6469dd62289131f8421d215a913
SSDEEP

1536:21OfsDBiCHJrJhHyWxqSRZoQNkI871Fs:SOfsDYkrJhHyWxq5S8pS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0720d4b0b6695a0a7fcbd93fc231ffa5

Files

0720d4b0b6695a0a7fcbd93fc231ffa5
.exe windows:4 windows x86 arch:x86

adb46ed3594214869db02ab086424976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord518
ord666
ord595
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ord716
ProcCallEngine
ord537
ord645
ord570
ord648
ord576
ord578
ord100
ord616
ord618
ord619
ord580

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ