3b42b3100cfe28c01c63e034b7aaf315 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b42b3100cfe28c01c63e034b7aaf315
Size

215KB
MD5

3b42b3100cfe28c01c63e034b7aaf315
SHA1

828a98dd94af3640001fd7257ba0ec6cc134905d
SHA256

3e069b6075ec1094abfd27e6017a77a32522719977c0ba1a128d4c12ff16c723
SHA512

8554164eec24a7cf38ac38eacffbc8d4987e711534fd1dad1da4bca69d33443927edcac6bd39194ed049d1fda1f56ad1d6c482dea3a07f9b87049ae8e2154d43
SSDEEP

3072:xdKSzKrhLO8QgBQyyjhYGE/Ot0VrPqkebaCJPfnTcqN4ggyKkLHS3XkYMKOSxgZe:CSzKFBuj0VDqxFXNVFVHSYlZwOZwU12

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b42b3100cfe28c01c63e034b7aaf315

Files

3b42b3100cfe28c01c63e034b7aaf315
.exe windows:4 windows x86 arch:x86

c8e88e15f0f90abff0a31fa56516afd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord665
ord300
ord595
ord303
ord599
ord306
ord309
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE