15dce9a4f129d783b0b644813d514677 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15dce9a4f129d783b0b644813d514677
Size

140KB
MD5

15dce9a4f129d783b0b644813d514677
SHA1

818accbd7f42f20d3ae1d942a44a17578cd7b258
SHA256

e875b2af56a547371ac0da844a45643ad1e115537bfed8f790c9b7aac085939d
SHA512

72895e858004a61b7a0a21aefe2b299df4c2beacada7dcf5a9f3b692efa85a1029b62ab8946a9ef576f519a46fc9c119158f513325cd881b747cfdc7377848fb
SSDEEP

3072:QPGTo2NNzsWbJpaDZWj3OtNfDZWOo2NNzsWbJp:QuM2NdsCJpaDZXzDZE2NdsCJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15dce9a4f129d783b0b644813d514677

Files

15dce9a4f129d783b0b644813d514677
.exe windows:4 windows x86 arch:x86

e72695d19801f72060e287ae536f501f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord685
ord100
ord616
ord617
ord619
ord580

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ