3cc850d21c3d95c3746233c2edcd107b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc850d21c3d95c3746233c2edcd107b
Size

40KB
MD5

3cc850d21c3d95c3746233c2edcd107b
SHA1

a215db7f1c7a949e09d2387359a9a06d7526f3a9
SHA256

695d0890e1b5c1a7d5ecd1cd44df849ef8f04896a29f9101bd603fa3082a8064
SHA512

5487c069b39ff2cc7f5c0e6c212595c50e158690f4d2e93d0893c87d084f76a1061f91b50fe14d51bb33d887234a358e35a0ef3631de962b13f798c6d7b16dc1
SSDEEP

768:90qBQStdouOE9dXdHHyIV4f01U77xgZWQxr:zQUdo6zk4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc850d21c3d95c3746233c2edcd107b

Files

3cc850d21c3d95c3746233c2edcd107b
.exe windows:4 windows x86 arch:x86

9aa60632ac28fe4b3c05845d6624ad59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord300
ord595
ord599
ord306
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord716
ProcCallEngine
ord644
ord537
ord648
ord572
ord578
ord100
ord616
ord618
ord581

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ