38dcbea66560998ebcc7505c6a1cb08d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dcbea66560998ebcc7505c6a1cb08d
Size

85KB
MD5

38dcbea66560998ebcc7505c6a1cb08d
SHA1

1b9794a6b8017ca01df1d8e5de9ce1ef7a42f62d
SHA256

79fc51f43a1d8be814868350711bf1e1b689aa0fbe2d6ccf9a9de647e2f4b98b
SHA512

969cc38e638d5a116256feda56d5d265b480c76fc6e154f739804bf7e6ceb5465b94554cd09855a6d940a01f5372acbe0f7e3a92028d65db336d2fe02171bc1f
SSDEEP

1536:9aj7nGknGYbZMEQMooMloMDMdoMeMAnngkU4kuuZgjyBKOo:9aPGkGYbZxQdoeoamovBnngkU4zuZgjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dcbea66560998ebcc7505c6a1cb08d

Files

38dcbea66560998ebcc7505c6a1cb08d
.exe windows:4 windows x86 arch:x86

4c67f5f9847b5b77ac8db2ca51d8c3d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord717
ProcCallEngine
ord644
ord570
ord648
ord573
ord681
ord685
ord578
ord100
ord616
ord618

Sections

.TEXT
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r2rc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ