7855e5b8d19aa3769754361c1a407e8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7855e5b8d19aa3769754361c1a407e8a
Size

460KB
MD5

7855e5b8d19aa3769754361c1a407e8a
SHA1

f9d045482eaef878737ac6bea1dc16ae4ccdd377
SHA256

e8a470372822ff038f75f2e4cc38241b85f233af7b5ad86b3ad5c60867ee1650
SHA512

33a774bea55aae4df76bd2525996732f0999e6bc13a54ce903444ec076111203ae20db5a1de1574fbeb5d9b95edc3408a62738a3f77f2616d3890f585f7b7469
SSDEEP

12288:5NHxqXl3JrUhwIEpqCiaiVJp7rdyppuff4U:/H+l3CwVpjiXp3dWS4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7855e5b8d19aa3769754361c1a407e8a

Files

7855e5b8d19aa3769754361c1a407e8a
.exe windows:4 windows x86 arch:x86

7d56a80dc749c74afe990d485c0d24eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord530
ProcCallEngine
ord537
ord570
ord100
ord616

Sections

.text
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ