3a29253650cb7cb1a9c42862c329354f | Triage

Sharing

General

Target

3a29253650cb7cb1a9c42862c329354f
Size

20KB
MD5

3a29253650cb7cb1a9c42862c329354f
SHA1

bb3499c8b9cf0f64f391c3cda5aaf00debe5930a
SHA256

77ecd49e3d35f78a9cede9484326eb2566008f42561d78a02699bdb133b6b642
SHA512

b2c3afd0680c4fe47daa6b0396241472baf9fbe190dc3b26d5074b75c3cc4c5989f7ee3ea2d87d2c3d1d669760a5eb807962f57088e7c8357f2def97fc4f8a7a
SSDEEP

96:Z4qJ9nbeEiI5EORcAXP1OAs4/ie7eqAJQyC2l4z9G1qTQCnQyrB8WIRZECdrcQ3T:ZhJ9fwAX9O34FtSs9xbmdOQCjDCJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a29253650cb7cb1a9c42862c329354f

Files

3a29253650cb7cb1a9c42862c329354f
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.
Size: 2.9MB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ