724abd2807832bb5349f2ab63fa50bfc | Triage

Sharing

General

Target

724abd2807832bb5349f2ab63fa50bfc
Size

68KB
MD5

724abd2807832bb5349f2ab63fa50bfc
SHA1

dbb6121e44e90faf20a2c4ec0a2f1447641af582
SHA256

42eb7974a38b797f1df1e4d475a350465ee4c9ecc7f90965cad18759c778a812
SHA512

d67ff56b5237f4d2b56f31bfc9633f2a6903a6ad9393d3d300dd4f756113fcfe17773fa74e4aeeb3d3dbaf2ad3f58710adada18a32074636155b8275462d6053
SSDEEP

768:vsdpgmBCHgJ1sqJBqM91D1P4Uv1jULdPHSeJNEWcy/tCgev1Vm:vK+HgJHJQsr4IUjV/gv1Vm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
724abd2807832bb5349f2ab63fa50bfc

Files

724abd2807832bb5349f2ab63fa50bfc
.exe windows:4 windows x86 arch:x86

355b5fb662e990da08cb8cbf1815a0c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord187
ord588
MethCallEngine
ord516
ord662
ord595
ord598
ord306
ord520
ord307
ord709
ord631
EVENT_SINK_AddRef
ord529
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord318
ord717
ProcCallEngine
ord537
ord644
ord645
ord647
ord570
ord648
ord577
ord685
ord100
ord613
ord617

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ