24b8153d1e3634e1d2a7bbd6f0505aa8 | Triage

Sharing

General

Target

24b8153d1e3634e1d2a7bbd6f0505aa8
Size

20KB
MD5

24b8153d1e3634e1d2a7bbd6f0505aa8
SHA1

7bec99ddb6ac955f4e6ed36956d21fae8b336c51
SHA256

35dba5c46a5ed25cc05bdf7a4dabc9780a2959f187b0ec49e9553d2a61d15a98
SHA512

274568a251ee52cfdc30cc551282b3882310ecf26184d022f77af24d1443f656552599e1956c00e47e4398859b8f3594d059c4069fdc09616983de4f39135aa5
SSDEEP

192:twHpweU+EpRCbBQ57y7Ktd4733NVaOVA+aSo4nbEbGUjykAb:KiTAb2VJqRVayQ4QljykAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24b8153d1e3634e1d2a7bbd6f0505aa8

Files

24b8153d1e3634e1d2a7bbd6f0505aa8
.exe windows:4 windows x86 arch:x86

9fcdd05d93731bc25722e901ce4ee33c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
ord696
MethCallEngine
ord631
ord709
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord616
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ