23042ff36ba2d3afbdd783fb2b8a09b3 | Triage

Sharing

General

Target

23042ff36ba2d3afbdd783fb2b8a09b3
Size

276KB
MD5

23042ff36ba2d3afbdd783fb2b8a09b3
SHA1

351766605bea5c178f43427660d48b2b76d018b5
SHA256

e63af2cbfd395350a3aeef250c574fe3f6f71f15420b30c2efae4989914ca787
SHA512

c1dba3716ac6f94b5f3e1654e3ea6d2541d471382c14c2a01a8984a87fcb41cd87f05de0272702fc695eea2702dd0009b7841a9ac4c94243bbe03c1553024938
SSDEEP

3072:5e1S8nAyOgu5Sw2N3XTcFSxBiBW7jh+LTF8x9xndaw4FEp9khzraNK:R8ngaRTUcgBYIq4aN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23042ff36ba2d3afbdd783fb2b8a09b3

Files

23042ff36ba2d3afbdd783fb2b8a09b3
.exe windows:4 windows x86 arch:x86

4799c2ff86933fdcb09047b7ef650a0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord660
ord593
ord300
ord594
ord301
ord595
ord598
ord306
ord520
ord307
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord531
ord717
ProcCallEngine
ord537
ord645
ord571
ord572
ord573
ord681
ord100
ord689
ord612
ord616
ord617
ord619
ord581

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ