fa33b003bb06b7550e1248ccfe883c12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa33b003bb06b7550e1248ccfe883c12
Size

60KB
MD5

fa33b003bb06b7550e1248ccfe883c12
SHA1

73fff8d86cc2f66a523c9c357dae490260858590
SHA256

16e3dac2d26a608dc42712d16147fb83f78946fe23f99e948a72a211220eb483
SHA512

563bdfe1556283a43dfca7aa31bffd0c3c86abd9a9168ec45fd4970418a3ce225bf7e35abd745dd36aa22d4246f1209f7c4fc5bd419608b4a1d7a5a54960f297
SSDEEP

768:7LYLZbQQ0Nyuqm0IUF6fWOZV6wpty2fhhhSjNy6RskeOrh:7LCZbQQm1qmzWOZX3ih9e6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa33b003bb06b7550e1248ccfe883c12

Files

fa33b003bb06b7550e1248ccfe883c12
.exe windows:4 windows x86 arch:x86

c3e40ee79ef1eb3517e975ccb28746e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord584
ord187
MethCallEngine
ord593
ord595
ord301
ord598
ord520
ord307
ord709
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord714
ord717
ProcCallEngine
ord644
ord645
ord538
ord648
ord571
ord572
ord576
ord685
ord100
ord613
ord616
ord617
ord619
ord580

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ