64473488f193f35890dfbd00eef173f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64473488f193f35890dfbd00eef173f9
Size

466KB
MD5

64473488f193f35890dfbd00eef173f9
SHA1

07f696e2546f3037d033b223d764c70f0003ea0b
SHA256

9ad14ffad20bf802b903130b801b62c0e2cb3290fd662f762a9f126e1cc07a2a
SHA512

f24eae545974031afb652a747c3f50e41c01fd1dc313cd2b3d878db86abb3e4077340873f4416ffe4c94d682e4ceb537fe68f4b7c3f4f0646cdc3dd8aa21cd4e
SSDEEP

6144:OAikiwCs7mI/ODOPGU2m7vCwRarCaf1pv2IqetlNiBi:XUe6f1Lqe3NB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64473488f193f35890dfbd00eef173f9

Files

64473488f193f35890dfbd00eef173f9
.exe windows:4 windows x86 arch:x86

1d662a0848b181e14b66e637bbebda50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ord644
ord537
ord100
ord617

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576KB - Virtual size: 574KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ