204d635fb6c53685eef6558a35890689 | Triage

Sharing

General

Target

204d635fb6c53685eef6558a35890689
Size

28KB
MD5

204d635fb6c53685eef6558a35890689
SHA1

4d4f6f36cd72e483a7ff35778b22499e33ba2b40
SHA256

6d129e5240f3ba5fea37b258623fe7d8ac02f166d3929830bc33fd8c3afe39b7
SHA512

bc7de11f7b24b669718b99b7b43d3ee3bc85df2f00646da868ae61e6a330d30ff5a0689eb62c7bcad7766744bbdb518bbb56e8aa131833934d5c4174b6acece3
SSDEEP

384:izDg2hYdBP2pzt9QldiZwBNtwqE/HaIZ3v3LZJ5KFdXuJGu:Ys9BP2o4wB738Had

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204d635fb6c53685eef6558a35890689

Files

204d635fb6c53685eef6558a35890689
.exe windows:4 windows x86 arch:x86

7b47a4bbbc117f56ce406ff074afc77b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord704
ord520
ord631
ord526
EVENT_SINK_AddRef
ord527
ord529
ord561
DllFunctionCall
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord539
ord100
ord689
ord610
ord616

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ