76c2b5e2f4401c6addf879afa63a30ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c2b5e2f4401c6addf879afa63a30ef
Size

225KB
MD5

76c2b5e2f4401c6addf879afa63a30ef
SHA1

c91cebe3ce0a3951f7f24e1b100f1d76452029ca
SHA256

9b7d6d07b44f0d4e34d0696c45d44789a986dac1f12877afd936a7c781b08d88
SHA512

3b20983ba516131d0691ae8107d1bd28aaa5d639a4078925cdef750b41a4ce3bf22c47636af4fb53e3be779d9b0e76b7571c32ca0ed736d9d677cd42ebb46888
SSDEEP

1536:0n6MYAZ6wQDh1M0z2P0yKL5xMlR/ovONB7u4X8J:0nxYSOKA5KD/oGB7gJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c2b5e2f4401c6addf879afa63a30ef

Files

76c2b5e2f4401c6addf879afa63a30ef
.exe windows:4 windows x86 arch:x86

8b0f2b9d77575bbba9f1ca45d89dd726

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord660
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord716
ProcCallEngine
ord535
ord644
ord645
ord648
ord572
ord100
ord617
ord546
ord581

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE