248be3e2c8574500e86708bc3f740272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

248be3e2c8574500e86708bc3f740272
Size

156KB
MD5

248be3e2c8574500e86708bc3f740272
SHA1

34e2e3af15b0ac635abf068bf3abed5c15d0e297
SHA256

e25fe0aaa0eee98655d5c98c505d7af19fa04c5cab3ae8090a33d888e2ed20bf
SHA512

b8734553140a14a9e5d512529f860c086c9b1d102e1069d950d5ea1e70609690cafbf3d4430b24c0847b112d8a3e3c9d32d64bb71e61e70625cd726fbf698e1f
SSDEEP

3072:ptJ/27ZSBYfkVoFdRrqo0aRaA/HF673+UWHIfr:p7qNkVsuaRaU6mHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248be3e2c8574500e86708bc3f740272

Files

248be3e2c8574500e86708bc3f740272
.exe windows:4 windows x86 arch:x86

1b1d59216013c9a811b52993a9074573

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord558
ord593
ord598
ord525
ord526
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord607
ord608
ord531
ord716
ord717
ProcCallEngine
ord537
ord645
ord570
ord648
ord681
ord100
ord612
ord616
ord617
ord619

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ