78aca448d1525443e0f42f3b90bc9732 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78aca448d1525443e0f42f3b90bc9732
Size

176KB
MD5

78aca448d1525443e0f42f3b90bc9732
SHA1

a3d49db04a6f4afa42fbf3207b480cf007e72e0f
SHA256

e5600d77e83b7e678d84d5a73325e401b5dca6f2440f7089220292bc39e4ce4e
SHA512

696ef0e9e788e05c3352419a6fb9fa8e41646727735548d90fee073bf01f55839d8bff7b5923cd6d1d9a0ad8631fad00bfbe33890d2b7049578a46d581374b76
SSDEEP

1536:zZQuNmM+ZhBf/AwYk2FIU9L9frIk9L9fOnuyMKG9L9fxIS9L9fbI820Y+dQ:yWmM+Zj58KUMkeueGWS8p0bQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78aca448d1525443e0f42f3b90bc9732

Files

78aca448d1525443e0f42f3b90bc9732
.exe windows:4 windows x86 arch:x86

10b61ca17227f722ca2b079baea282e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord531
ord716
ProcCallEngine
ord645
ord570
ord100
ord612
ord617
ord543
ord544
ord546
ord547
ord580

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ