3420f894030be66c175b7529df281b45 | Triage

Sharing

General

Target

3420f894030be66c175b7529df281b45
Size

100KB
MD5

3420f894030be66c175b7529df281b45
SHA1

a1e0af396b4ac93c638fe71d8f8114b6f2aa7ac0
SHA256

20a35a2b7fa91ebcfbcb23dc7a028988261a42a601cd1b138df20007194c5888
SHA512

f18da0cc015d07b10a547224fc33df1d846d845c29da9d572461df6172b110e8478ed0668ff9882e4d6c24b6772b67f7122b8b266902926d688b55f0907f0b1a
SSDEEP

1536:s1W1cX220mQ0xJKIRGWcOUP7vXArnY1ZqAefzyespVNIjnZr:KlQnNAfzyeOVCnJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3420f894030be66c175b7529df281b45

Files

3420f894030be66c175b7529df281b45
.exe windows:4 windows x86 arch:x86

9993a71410e148077d8c1b14291428fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord518
ord519
ord669
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord578
ord100
ord616
ord617
ord618
ord619

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

amiwvrb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE