7efe350246bc635a9849fb40727c6198 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7efe350246bc635a9849fb40727c6198
Size

232KB
MD5

7efe350246bc635a9849fb40727c6198
SHA1

d992ede90cc77140e91a0366ef27bdf4ab0a0379
SHA256

08f79a214c4ef8449f0ebefdbd81ca8194fee5f1afb07c6f28a4423faf99be53
SHA512

8f6da6102986b83aec5ad13ac095bf0cb35f5f3fd8fdd9dc871dfdea0442e1d797ce4ba48a9b5a1a3d02065ed7b7d1b3a1991df17c571fb0aab02de2db541de5
SSDEEP

6144:BK3PFKs78g2KyEOaWEqxF6snji81RUinKdNOAn:2Ph+mF9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7efe350246bc635a9849fb40727c6198

Files

7efe350246bc635a9849fb40727c6198
.exe windows:4 windows x86 arch:x86

efafd579ca679191f29641e38a03e217

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord520
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord648
ord681
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord619

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ