3b7c465b23476412043b27115733d886 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b7c465b23476412043b27115733d886
Size

56KB
MD5

3b7c465b23476412043b27115733d886
SHA1

da050976a54bf5d42e723ba1310dca6780a336dc
SHA256

cb803cedab734d39c7597b0f5d5524d34198b04d69bead3ea51f8b765fc05c5b
SHA512

e21b1b8e98b8763ce894771676dbaabbc5f7956f2b150114eb87a8b2a0814636a665c0796bcebb26124789c76ad3b37e87f9fad8113806507fa2a56de00cd7d6
SSDEEP

768:n7DObzB0hRrBqIXFnTJINPOXc4HylYMFAA:n7CbzB0h2U6tYNA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7c465b23476412043b27115733d886

Files

3b7c465b23476412043b27115733d886
.exe windows:4 windows x86 arch:x86

56677bc0ff3594acd46ca97387c830ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord620
ord669
ord598
ord520
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord531
ProcCallEngine
ord535
ord537
ord645
ord648
ord570
ord681
ord685
ord100
ord610
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ