1485643545529e7eb986f0af4bd10977 | Triage

Sharing

General

Target

1485643545529e7eb986f0af4bd10977
Size

28KB
MD5

1485643545529e7eb986f0af4bd10977
SHA1

0a28c7d92411535f7f8219a52f95c7d80726ada5
SHA256

8f1047bbe218e388f56fcac53904c33f6082578aec0db55e3424690c6ef2eb30
SHA512

a9dfaa71692d02ac8047c2144db6b24bc7c82a312b952558491c81616ad0451c4c31849b6f35df910bdf9c4e4aefd4a156bc5c5bbdd3dfaa3a302c91fa3346b8
SSDEEP

192:dtzWsyD+4Sq00yqMBiOu2E7+x5m1bBBap8xEE6fO5bn5qzo6qWP7YV3jBU:dxWNSKyqMAOgvZsNW5Fn6XGjBU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1485643545529e7eb986f0af4bd10977

Files

1485643545529e7eb986f0af4bd10977
.exe windows:4 windows x86 arch:x86

f7d50bf6274934215ab1b17a44e0cd55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord589
MethCallEngine
ord515
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord680
ord100
ord689
ord610
ord617
ord542

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ