1021e0c348419830381dba6160bd842e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1021e0c348419830381dba6160bd842e
Size

40KB
MD5

1021e0c348419830381dba6160bd842e
SHA1

f3578fb8040f33540eefca54596cd2ab7c937106
SHA256

47ed355ce8246b7a013ddfaf127f3804e38a310ef1c0405c21b388f69a43d6fa
SHA512

50f2ae9eea5cceb1e55fa82699115c3e244ccf06e5bd849d1ce2ed41bc863c3a2a8ed1a8ace623321dd82de585bec748bf9d81ec8cbcffdc614fc88cc79edc14
SSDEEP

192:UStt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9KwDEWynW4gQQQQQdQQQQa:USttDD74mVaNj2W3Dwre/9KwDEWynlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1021e0c348419830381dba6160bd842e

Files

1021e0c348419830381dba6160bd842e
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ