3b8b72d92cd7874a9a61f60f94c3ee66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b8b72d92cd7874a9a61f60f94c3ee66
Size

304KB
MD5

3b8b72d92cd7874a9a61f60f94c3ee66
SHA1

05416de1cb4a0094e78c2543942e4d5a39f88fe6
SHA256

7c8269dc3bb91709acc42229f5fd68146ba393ad6b177ea17266d703a6a35f7c
SHA512

82dec864a4468b4b37071ea66a5760eeea478b484cf8afc89a6a2f5e719053162efc9dbca74b7a0172bccf0a1bcc904a3bc6a1a713633b3c3fab64ca3bb8885a
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8b72d92cd7874a9a61f60f94c3ee66

Files

3b8b72d92cd7874a9a61f60f94c3ee66
.exe windows:4 windows x86 arch:x86

ec93d43ff758b5de7005a039a7bf80b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord697
MethCallEngine
ord628
ord661
ord662
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord100
ord546

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ