18623bf97d647d6932b3c4d06c3f1029 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18623bf97d647d6932b3c4d06c3f1029
Size

24KB
MD5

18623bf97d647d6932b3c4d06c3f1029
SHA1

7c7e5c1201609a27f84d272c01b5ba21c7e37675
SHA256

02a84faf78a7c104b9dc5fdcaea8e2e7580ac2d673e7037bf93e9b3799fb1926
SHA512

2e69b704c2c6fb87123db9760a8b9e2de7547ca4aabef1a27affa9d3eb80e5347bb80b1c403eaed9e4577f3f437017a7f96fa5595035f00d420a75aa71c9944f
SSDEEP

384:pbWgReiCDMndBkQC79fy7IDDJ9DXHtT6Z8uhzamE7:p6gRxCDMndBkQCXJ9DXHtg8uQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18623bf97d647d6932b3c4d06c3f1029

Files

18623bf97d647d6932b3c4d06c3f1029
.exe windows:4 windows x86 arch:x86

eb228367f38f1c47d03adf6245f5f3c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord585
ord693
MethCallEngine
ord516
ord660
ord520
ord709
ord631
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord714
ord608
ord609
ord717
ProcCallEngine
ord537
ord644
ord100
ord689
ord616

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ