0ab3d70ac32e2def901816a41ee6aa45 | Triage

Sharing

General

Target

0ab3d70ac32e2def901816a41ee6aa45
Size

108KB
MD5

0ab3d70ac32e2def901816a41ee6aa45
SHA1

1fd289c2461400899dee054c930aeb0e06a93a2a
SHA256

e0a5465f723ca3e0d5b1d6840d4fe8d9094582dc88e7a66ee8933a228e5108fd
SHA512

35c6ff6e5f30b600c04ebf6d38779d2a0bd928eb8d906a0343928126d113e4ac75168294257bc781c78ff2fc2e547b5a8fa0718c5d39449ccbf12f4a765f6deb
SSDEEP

192:h7he8RfqOfRymIsBYLqHfF6CorwqKPa7cPRBCBs2f9lSk5oqnZMwJV:hNcOfRS+/4CrxPa7cPRBCBsyRM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ab3d70ac32e2def901816a41ee6aa45

Files

0ab3d70ac32e2def901816a41ee6aa45
.exe windows:4 windows x86 arch:x86

9ca7554cc97498aa4bc9c49c4e90b4d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB