75bec1869235742203c4b039686f408b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75bec1869235742203c4b039686f408b
Size

130KB
MD5

75bec1869235742203c4b039686f408b
SHA1

ff883a14bd1adf5d57ad88b93bc813be44a71ae8
SHA256

64842968eebab5aab4b245aad5b2077e2533deb5aee8fe2a7bfd0d8b6836b5f0
SHA512

818f4532f9a2701b4b36451427bfac86ac8dd3903bb8fd51128598929181efdb41d66156f2bbd0ff06c3d5c2d6f93d920cc88336cce7be1d2bf1eb16268b6d69
SSDEEP

1536:5zzVYTnhC3h/iFUtmhC3h/iFUtAZg68ZUJ4/Z3khIi9MIK:EFeKEaeKEEg68S4KIi9Mb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75bec1869235742203c4b039686f408b

Files

75bec1869235742203c4b039686f408b
.exe windows:4 windows x86 arch:x86

08afdf0c8b96d3d11cbbd435972bf750

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord570
ord100
ord616

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ