77b2989aaf1b327487bd9d0c86d88efb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b2989aaf1b327487bd9d0c86d88efb
Size

252KB
MD5

77b2989aaf1b327487bd9d0c86d88efb
SHA1

393c3bf89d2c1b8bf387c6f358826f81dc2ebdcb
SHA256

e595ebf680fc4ccace68e53dea146eedf342e363ae8099ae9bf03044779626e4
SHA512

39eaf14f4212594939e50e1a8a6d83fa5435879e9e6120ff7a424133d984b3cad64f6014fb2ed534a12f2f1f3e40be36d92a54e9b1d8f1b6b7c9161b760ccc28
SSDEEP

3072:l4h/ZaMroEyxnubMpNzNIvExOd4s4i+aZjMiR1cHYH:o/1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b2989aaf1b327487bd9d0c86d88efb

Files

77b2989aaf1b327487bd9d0c86d88efb
.exe windows:4 windows x86 arch:x86

06e0e4d4cf20025b6d2e9de7e2ed6863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord696
ord628
ord665
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ProcCallEngine
ord644
ord100

Sections

.text
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ