19bf75f3fdb9983f5aa1800cbb844fcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19bf75f3fdb9983f5aa1800cbb844fcf
Size

100KB
MD5

19bf75f3fdb9983f5aa1800cbb844fcf
SHA1

747228eefc09f286018b479bc55e49ed19b8db9b
SHA256

9ecbb28508cad01677ed64773a420f4bf5a529a0a458752e014917db6ae8978c
SHA512

de0797b1bfd7a0b5c322dcdfeae29afb43cdac95c4edf456bf3e0164500ef325d36ddcd21e8206577261b66fbc2b8edc330e8bb65a0b9e4276f9594bdaaeed8d
SSDEEP

1536:2OqpcDFy1ZxwKqFUlZ0bACOdNQnFlfLT1B:3y1ZxwNusfLT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19bf75f3fdb9983f5aa1800cbb844fcf

Files

19bf75f3fdb9983f5aa1800cbb844fcf
.exe windows:4 windows x86 arch:x86

4fd2122e55b22c8417b77980f30e6157

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord692
ord187
MethCallEngine
ord516
ord519
ord668
ord595
ord301
ord598
ord520
ord307
ord522
ord524
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord572
ord573
ord681
ord100
ord689
ord613
ord617
ord619
ord581

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ