f8f012bbc9d57faf9eaf152070f026f9 | Triage

Sharing

General

Target

f8f012bbc9d57faf9eaf152070f026f9
Size

44KB
MD5

f8f012bbc9d57faf9eaf152070f026f9
SHA1

b0430b1e5b43526c55b1148f56aa65de1315e6f7
SHA256

d474477f6b6b4539fe0685655e357a41f4254bac3e331f0c3103d4b67af009fd
SHA512

c70bc8cb9e017904c54c4b3888e4c16eeb2c82528e50f40b3a21bf13dd094e56615c9fb085f9f7c09c7a838f24b1b2c93cbf40df943db8562441e5b69bb52a03
SSDEEP

384:COt6sQ/ybtyRtwRNZh9rhgqrpvygchNeLL7IsREwRNZh9rIyRPb4U6sQq8:LcsQ/2jVXlv9ch4P7IsRvVr4/sQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8f012bbc9d57faf9eaf152070f026f9

Files

f8f012bbc9d57faf9eaf152070f026f9
.exe windows:4 windows x86 arch:x86

f0ec1f73c6a010a29e1fad032d9d649a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord693
MethCallEngine
ord628
ord660
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord716
ord717
ProcCallEngine
ord644
ord573
ord100
ord616
ord617
ord619

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ