74cda927806f41e2ed806252f73b90c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74cda927806f41e2ed806252f73b90c7
Size

628KB
MD5

74cda927806f41e2ed806252f73b90c7
SHA1

6ebbe524454005f2d16a876a8a95f873b56b4a59
SHA256

b2e64d0e84aff74eb2e0c6cfe740f8922f6fecc376b68373e3e7de2e8f6d5094
SHA512

0b25b32e1d1b97c31a317d7c7300220fa99e8c020c5ae7d16d4131b81e71d5aeb8d145f0c4432335d5083f54fbe9b0320484c30c3c283f84022d0cfa31ae3388
SSDEEP

12288:V7JV/ZMO+KqH7zak7K0IXMBR6yrD7VORbCV/hWp:Vj+gi7zakIsR6yroRCV/hW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74cda927806f41e2ed806252f73b90c7

Files

74cda927806f41e2ed806252f73b90c7
.exe windows:4 windows x86 arch:x86

c878c0a7c6b5f7b9559c8dac2c8ef961

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pstorec

PStoreCreateInstance

msvbvm60

MethCallEngine
ord516
ord518
ord519
ord553
ord666
ord667
ord669
ord592
ord593
ord594
ord595
ord598
ord520
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord607
ord608
ord716
ord717
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord681
ord685
ord100
ord616
ord617
ord618
ord540
ord619
ord541
ord542
ord543
ord544
ord545
ord546
ord547
ord581

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 520KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ