29b74d63d9a328048baab175252217f7 | Triage

Sharing

General

Target

29b74d63d9a328048baab175252217f7
Size

36KB
MD5

29b74d63d9a328048baab175252217f7
SHA1

40509682e1f266b25eed9f288384c92c81af5420
SHA256

98c3aa658da85a0a12ec95040806a7267caa9c4f7a055feb796c39cdd3467ad6
SHA512

6d7ff779c67ba82bcd6b2e34f55a09f7e65ab574d8a62b86c012ff73c8eea16d0c66841a9c0ceab69b981652b65ea7c43934720d78d51f362a7e8a988043fb30
SSDEEP

768:BYCWDDgOne5MjOAz6tD3pFKrYutZgvRI:+hckcD9vW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b74d63d9a328048baab175252217f7

Files

29b74d63d9a328048baab175252217f7
.exe windows:4 windows x86 arch:x86

68af3d26b5c2bfa06a8d70f2dd1dee8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord593
ord594
ord598
ord632
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord645
ord571
ord685
ord100
ord616
ord617

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ