20232447393a28575e145f0befafb88e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20232447393a28575e145f0befafb88e
Size

312KB
MD5

20232447393a28575e145f0befafb88e
SHA1

6a5810f13e1add28ae0b46487dfcfa77cc31d98b
SHA256

50b79aae7d782c54acce1e54d870511d451baa1a27685b4db92f674911acef8a
SHA512

074240fe796a9c4233b675ab8d77ea0e455815f0a7e7164a0933dd96b0c1ad8d04e90ec2f937edda22b304e78c7ca0ad70673d20a2435e934b55c290deb0f1ea
SSDEEP

6144:ks7zvTlIpr1f+XqO5aOmSGFDbeOjLPmUSgF:DDTlIB1f+55SpNPmUHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20232447393a28575e145f0befafb88e

Files

20232447393a28575e145f0befafb88e
.exe windows:4 windows x86 arch:x86

e14d8ab77a7e29f6cd12e014eaa81a38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord665
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE