621018fff5e8b828908e68319adb693a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

621018fff5e8b828908e68319adb693a
Size

120KB
MD5

621018fff5e8b828908e68319adb693a
SHA1

846a2287b07f8643cb16b3d65e51546f9491f296
SHA256

7b97feebfb0538d3f9fa8d48a0dbf7d34b997877041b5ca41147244a0ed8032a
SHA512

980e8bdefdf9dc767f5685297087cb9afc11f671608d2bf69ed0823dba5d23cfd719f2072ab46f46cb0e4ffb6b9f89c3f91b672071a0004f6e19f131ae4d600c
SSDEEP

1536:JgmZan2JHw2f8eWcnREr7n/NmwLi8hGnbvtB3zNVlK:yv2pw2wAREnYwLi8hGbvjZVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
621018fff5e8b828908e68319adb693a

Files

621018fff5e8b828908e68319adb693a
.exe windows:4 windows x86 arch:x86

7baa1672cb6f773ded988e282a5302c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord517
ord519
Zombie_GetTypeInfo
ord593
ord594
ord301
ord595
ord303
ord598
ord307
ord309
ord631
ord525
ord632
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord531
ord319
ProcCallEngine
ord644
ord537
ord538
ord645
ord539
ord570
ord648
ord572
ord573
ord681
ord685
ord578
ord100
ord610
ord320
ord321
ord616
ord617
ord618
ord619
ord650
ord546
ord581

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ