16318f36fee84f9b1d896428d3f718bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16318f36fee84f9b1d896428d3f718bc
Size

22KB
MD5

16318f36fee84f9b1d896428d3f718bc
SHA1

21695e73046611218ba4e5a3edfd8e915039cd14
SHA256

a7e73aa9869b6a8458a570cd609f9da7b2973d4440d831f2d22fcf2611985c9a
SHA512

c308995d348fd012031170db9206e642855587b235e69107bcf8e1e87fccbdf428828f9037dd4c9ba11dd926a369a436826ff56e1f48cbf68bc8ad0fb900739e
SSDEEP

384:1M3PnQoHDCpHf4I4Qwdc0G5KDJfOWW4W8QX+ByfC:1m/QojCpHfx02Wq8y+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16318f36fee84f9b1d896428d3f718bc

Files

16318f36fee84f9b1d896428d3f718bc
.exe windows:4 windows x86 arch:x86

96e57d09efd03a48c83f1349e435734e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ