687db91178afdcb5f913f81a5dda8c3f | Triage

Sharing

General

Target

687db91178afdcb5f913f81a5dda8c3f
Size

1.2MB
MD5

687db91178afdcb5f913f81a5dda8c3f
SHA1

33f23332735af3fab72fbd6cd8ce181d6db30abd
SHA256

3e2ef935a803dda25716f95a47d233f55aa12fa077bfe0189153a4a819dd480c
SHA512

2d38cb6a164993b007cdb93a9359e9808542968c47323877bf8a29e72f51b8dc1e9f5fe2605aeee102d626768bddb1afa9d0f3cc2a96e2a89d6b68536ec15bee
SSDEEP

12288:qFhOcT1xou5KzCg6/EC8wyvCWTULgnv0cQeTfw:MhTT1iuI6sC8tvCMbnv0cQMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
687db91178afdcb5f913f81a5dda8c3f

Files

687db91178afdcb5f913f81a5dda8c3f
.exe windows:4 windows x86 arch:x86

a096c853cd97fa5880145cfe6c985ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord631
ord525
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord537
ord100
ord617
ord581

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ