34ced18827eabd3a453f92b3ec8ac92b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ced18827eabd3a453f92b3ec8ac92b
Size

116KB
MD5

34ced18827eabd3a453f92b3ec8ac92b
SHA1

6fd775c6c83f22831cd28525db74a1f4440aa9f5
SHA256

11e7fd758b00b2193b588253353877596d5a98888eed5d6624524622f9660d06
SHA512

fd45c6053faae8e79f6da0cd8b81d0c1b98687010425686910f9bdf5b2362733bf7814a6fdb2fe11c3ef12c752f2ac6e20b05e794f1486808e204745ad67e85f
SSDEEP

3072:s4jXZjG5Cjy8O0jYxByGobQtK8bd7zYg8VH:ssTC0jY7ob+bSg8VH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ced18827eabd3a453f92b3ec8ac92b

Files

34ced18827eabd3a453f92b3ec8ac92b
.exe windows:4 windows x86 arch:x86

be7466acae4fdb5e59c78767bc7b6dd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord573
ord681
ord100
ord619
ord581

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.snake
Size: 32KB - Virtual size: 32KB