f8f1c5520568754dfd4fd4ba7d04b1de | Triage

Sharing

General

Target

f8f1c5520568754dfd4fd4ba7d04b1de
Size

529KB
MD5

f8f1c5520568754dfd4fd4ba7d04b1de
SHA1

e8d3db144c9c32a8b3b0d272e4a791f6303a494e
SHA256

009618c7a0587fbf7128e9c88a8294cbac716fa535fa24bb692aaa1c3c35d60c
SHA512

7aab736d0c14205b559436ae34b0daffe18c4f639cfe6dda0d99c36ef173c5a6ef7f9462f88c8a3b1f27a321fbc0ed0dddc1d259810a27723fbad31e003888d4
SSDEEP

6144:5y1goobRe69T5znZwjsJVU9P2riCJQUJmfRrXm6OMFZr01vDB6HKFZtT9gR4Wun8:tt9x6jsJ1XpoR7u5veKlTSq2M8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8f1c5520568754dfd4fd4ba7d04b1de

Files

f8f1c5520568754dfd4fd4ba7d04b1de
.exe windows:4 windows x86 arch:x86

843542f13f719d519ba2c777aa9aaf60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord516
ord628
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord717
ProcCallEngine
ord644
ord645
ord573
ord100
ord617
ord650

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ