763ef796ee1af7d3217013c25a48f7fd | Triage

Sharing

General

Target

763ef796ee1af7d3217013c25a48f7fd
Size

216KB
MD5

763ef796ee1af7d3217013c25a48f7fd
SHA1

5c7b2eac202d1642ac58a840f5de3b47c10012fa
SHA256

ca808d092ab91b9003b32560941a1a30f3c76cc427512ab3c4fb70efb62d4ba3
SHA512

b8750482fd3514a14377fdf71c902e5a774ceb2f97381a74414e1b520516ce2a63e6a8710345d416420b7b16c87fc5495a22f218f3465621eb30aeeabadd9310
SSDEEP

1536:Dkf1zwQVg/8WuREUlOQnF7TkkYSDY6ep5f1zwQVgvXg6Y+:I1zwL/8WuREcnFEkYSYpJ1zwLvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
763ef796ee1af7d3217013c25a48f7fd

Files

763ef796ee1af7d3217013c25a48f7fd
.exe windows:4 windows x86 arch:x86

8b882453a4787c640876aa61fa204ce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord694
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord552
Zombie_GetTypeInfo
ord592
ord593
ord594
ord595
ord598
ord706
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ord716
ord717
ord319
ord533
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord578
ord100
ord579
ord610
ord320
ord321
ord616
ord617
ord619
ord542
ord580
ord581

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE