674b9992995e06d3d411c10331530326 | Triage

Sharing

General

Target

674b9992995e06d3d411c10331530326
Size

316KB
MD5

674b9992995e06d3d411c10331530326
SHA1

528c175c394cda8ffa3c66b919f212f7e814a626
SHA256

18d2a8be26a89684c51f694a56477e4f71f70f3adee49790b1ee963f5f3b9c95
SHA512

f096127ad6e4728e707a2381f4357fdba3c5f49af4e4f4c82d63cec90d2f6a255870c05f8a42648dfffc355e8ee3e6decfa3a34d811f8170e7a996d0fb360e99
SSDEEP

3072:6WRCNa4+xFr+tAizCdaNTeYDcF6YkUOSKemKmDu9KVpTOF:6PNGr+WizCoeYDSHL25Du9KzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674b9992995e06d3d411c10331530326

Files

674b9992995e06d3d411c10331530326
.exe windows:4 windows x86 arch:x86

e58ae37a1b384ca5fac79c32f2725be2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord517
ord518
ord556
ord669
ord595
ord301
ord598
ord520
ord307
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord571
ord572
ord681
ord685
ord578
ord100
ord613
ord616
ord617
ord618
ord619

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ