633c560869f2f6a6822fab0cd13bb126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

633c560869f2f6a6822fab0cd13bb126
Size

104KB
MD5

633c560869f2f6a6822fab0cd13bb126
SHA1

aa4f17e678f46b04e5d79224e820096a3216b83b
SHA256

dba162c2c4b3bd4752b1ee2a963c697c0099bed53ca325919b4d3bea86583a75
SHA512

9d1272e2ff1d50d778f4ea43514720f022f770c98b5cfd4dfffe545c6fd218717c44825324f1b594c38f1d35d0c5a5314756b33408972abf6a49f85059e2e0c8
SSDEEP

1536:J4Jf83W8W60IL26Ap8iJxveRy3L4Jwra6xpR62mSHU2LI2bwQvnnTxJJGHA9XkZE:KJCD548iJzR6fMHnbJeA9XouuXHTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
633c560869f2f6a6822fab0cd13bb126

Files

633c560869f2f6a6822fab0cd13bb126
.exe windows:4 windows x86 arch:x86

ea23fc29d95be057d4e7c6b77d74a60d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord645
ord570
ord571
ord576
ord100
ord617
ord581

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

odqmtyd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE