33069bdb50cb62575e7f3e4a031c7d09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33069bdb50cb62575e7f3e4a031c7d09
Size

116KB
MD5

33069bdb50cb62575e7f3e4a031c7d09
SHA1

aac7045b50561fffd518cb96941102260bcaeed4
SHA256

47a215ca6dbee5b65484f60781e267bdb4d2f35f3a40d5dc9de97db94ca6d105
SHA512

0b963dbed24d4b32b3ef13a69599f080a4624868758efda8da228b4c61fdf98313fbf6d5627a8a93f582d21a397ce0fe44e8f9550573f74d06e2587cf6aadae5
SSDEEP

3072:/DahPBarKpbqikVT9YGeQ5HvlEolTId5Ny88x+u3C:2hPBarKpA55vFdIDNy99S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33069bdb50cb62575e7f3e4a031c7d09

Files

33069bdb50cb62575e7f3e4a031c7d09
.exe windows:4 windows x86 arch:x86

375c7402f8748b0ff0440c4212cdf8d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

msvbvm60

__vbaVarSub

Sections

pec1
Size: 22KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrsrc
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

txbfedc
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE