69ad1ac0ee0dc81e66f1be9bbc48d542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69ad1ac0ee0dc81e66f1be9bbc48d542
Size

172KB
MD5

69ad1ac0ee0dc81e66f1be9bbc48d542
SHA1

24f7a2102afd0202ca0ef3d9f64b98b5a31b94e6
SHA256

b963d327f0d2fb2a75ee814c491d595e8fe871a9b6e8f3555d8edd597711444c
SHA512

bd78bea2f7b836287ea40eeec774473b55192dfedfcbce146d99179b7b4207c155860893ce81ad20997540382f4238526fa7500c09f4b827ba7572802d33e313
SSDEEP

768:86IN2L01OA9YP9/OdwiuvxKH5esBk/WRUDiyIdVngJ9N/NRf/SxMA4RvmW5cPh04:8CBqYP9LHTJ9VNRXSxMA4p5cPhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69ad1ac0ee0dc81e66f1be9bbc48d542

Files

69ad1ac0ee0dc81e66f1be9bbc48d542
.exe windows:4 windows x86 arch:x86

91fbd6a5954cafc0eee4021fb9a2ba07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord520
ord631
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord100
ord431
ord617

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ