319d6aa907588ef6a1a38842f8537660 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

319d6aa907588ef6a1a38842f8537660
Size

164KB
MD5

319d6aa907588ef6a1a38842f8537660
SHA1

4ace94556abea08d654299a6950625eae111b3fb
SHA256

5161673ef82b57b599a94ecd077fde47ae62a03edc4fac72230186744740612c
SHA512

67680b20033077dad7c0041e283d27b8b27cac3e371fa623e233907e8a38644eb722aed36e871b006615598b0b5e335d41898182dbf25696eb4095fdbf7299ea
SSDEEP

3072:i7DJ+WUQJhgDd16u5xY4gLtH9MfjSTKIGw9lFezdZICpYQlN01obwczn5rhynB/G:e7UQJhgj6u5TgUfjMlFe5ZICpD01jcrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
319d6aa907588ef6a1a38842f8537660

Files

319d6aa907588ef6a1a38842f8537660
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 156KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE