0e2117cba8291420aa5ef854c4d440c1 | Triage

Sharing

General

Target

0e2117cba8291420aa5ef854c4d440c1
Size

88KB
MD5

0e2117cba8291420aa5ef854c4d440c1
SHA1

96f5ff6decefdf155d6c4d6f76b3c4f98efcb42e
SHA256

34d6c7bc33e4d32b84a6e13ab997578d7520539d9fc2f8a9d20d58fcb8ee941f
SHA512

9ed25b0de0c491a7a9fe18a199a42e826503d9758ace5c110deca3e111d38c04a875ff433c08f893ee335b6ea0701f527bc2950f5a95a7a533aca977195c4f33
SSDEEP

1536:7BuvjHmCqG84caEz0+nCsNAhz74yWzVaAgGV4VE:kjHz84vz74yOsAgG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2117cba8291420aa5ef854c4d440c1

Files

0e2117cba8291420aa5ef854c4d440c1
.exe windows:4 windows x86 arch:x86

42ddaa87578ce8aae99763a07142e368

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord187
ord588
ord697
ord698
ord516
ord517
ord518
ord661
ord669
ord598
ord520
ord306
ord307
ord709
ord631
ord632
ord527
ord528
DllFunctionCall
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord644
ord537
ord645
ord648
ord573
ord681
ord575
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord544

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ