682e90f79fede5a878ff38d7d0e85992 | Triage

Sharing

General

Target

682e90f79fede5a878ff38d7d0e85992
Size

24KB
MD5

682e90f79fede5a878ff38d7d0e85992
SHA1

387428c8156b52c19db4ac23e665b8982773d6a1
SHA256

791116f856656c53b89fd1564ead6d2b80f4785196ab0742300faa4ad5683dca
SHA512

64b9306fe681424382ad697b209138f37eacbb0fc9ae315d07f6076394e4b3a0a6f8592b81b4c7774fc0fa56213b2af9e53a4acf6edc4f0fd138f7aec893c88d
SSDEEP

384:CnvD2rr8wy8HFBKksWznKnydQQydkOhjTWkgt+zk:Cr2rRHn1VznIEydkOhtS+zk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682e90f79fede5a878ff38d7d0e85992

Files

682e90f79fede5a878ff38d7d0e85992
.exe windows:4 windows x86 arch:x86

6503200d9b0ea7931e14d0606879af8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord518
ord593
ord595
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord576
ord100
ord616
ord617

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ