79de5b392315bcd7d2b24b14bd964e00 | Triage

Sharing

General

Target

79de5b392315bcd7d2b24b14bd964e00
Size

228KB
MD5

79de5b392315bcd7d2b24b14bd964e00
SHA1

d3dd401a925b094c0f915d22727d4c9867e09f09
SHA256

e9ed7cfe59446db4c4cb01315aef54403c49fb55d4731e8b7ba92109e68c41e7
SHA512

86f00eb1e7522cde06048ec575b47d6704b7802affce1a3009ed1596d028c6d29a453ccb966f6f6df8fa45aa9cc8827fd9d3b3b59c2c9a815dad447ed6b0b390
SSDEEP

3072:puobqjoel10KtElgIPXt/PllaS3HWTC7MmGGJ0B2YlI+McgjEt40v:p/bSoe3GlguXt/PWTTCAJB2Gjzv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79de5b392315bcd7d2b24b14bd964e00

Files

79de5b392315bcd7d2b24b14bd964e00
.exe windows:4 windows x86 arch:x86

2c4b9ba8e308fc2b5cf41f5d69d96d33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord666
ord595
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord100

Sections

.M3n3
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.g@tt1
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Best_
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ