1cf5c359234a68173fadb25c29d3ffef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cf5c359234a68173fadb25c29d3ffef
Size

795KB
MD5

1cf5c359234a68173fadb25c29d3ffef
SHA1

de04f69dd3e85d0e321d7408b86b0dd787aef3e4
SHA256

77f08edce43d709e5eb919bf33de915c68673237c16ccd9f6ed2434203225cb2
SHA512

55bbd23b22267b0694e3419ca2cbac7d055c99aaf37fa4111893a327e63e50c565f23cef8572a206d914b7a127c61088b93c9a6e69ff82d805fdd7cc954637a6
SSDEEP

6144:P8L1OUb0KsbQa79E/bm0goDgA9N2RzQGlyyRuuPGuyyyOsssxAAAACAoIGxAAAA4:E2Qa79Abm0TgRlyyRuulyyyOsssOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cf5c359234a68173fadb25c29d3ffef

Files

1cf5c359234a68173fadb25c29d3ffef
.exe windows:4 windows x86 arch:x86

72fd5fd098803e9625a4882ecf27f82e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord553
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord570
ord648
ord576
ord685
ord100
ord617
ord619
ord542
ord543
ord544
ord545
ord546
ord547
ord580
ord581

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.�data
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE