31b4f5490daa48d5194f598674a16516 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b4f5490daa48d5194f598674a16516
Size

56KB
MD5

31b4f5490daa48d5194f598674a16516
SHA1

5faf9ea312bb4fbc42b18f21f9ed865a92a21bfe
SHA256

e67062fa575c9bb17ee1cfd72163db33120a00bf9431f7fc5403eb98caecbaa3
SHA512

cf364e7dc02983455ca27d52587a9547381a84a5e7b555ec571d145fcb3cc0ee66f60836d7bed76eecb6801a9140e8eb90279d2ee8790f698eaf977c1442134e
SSDEEP

768:+sr0bHVJFDBDxJ/Bmz15QAFbg7gA3VolY+Xe+aGUHaGPOfnoqAMV4b0bHk:+srCFDDJpmz1whwepz6GOdAMiCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b4f5490daa48d5194f598674a16516

Files

31b4f5490daa48d5194f598674a16516
.exe windows:4 windows x86 arch:x86

7b1e7b89800f23b409e94ccdf66c3bf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord647
ord573
ord681
ord100
ord612
ord617
ord619
ord546
ord581

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ