f90fc633a00fe7c44579ebb44387a765 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f90fc633a00fe7c44579ebb44387a765
Size

516KB
MD5

f90fc633a00fe7c44579ebb44387a765
SHA1

0c9b4b04ebad4864a632b23d6ec3e7e0a4327377
SHA256

04ee302416d29a6a812a1b273018ba4009f0cbe46108b487cf9172fc3e24522e
SHA512

a0dea87279fbaf8f97635204ab79e000b213610fc54423295ebf097a815ac829edeb6668f1242e59ec2a284f260ca337b49384e553df374fba1e92b5a8aab764
SSDEEP

12288:olfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCG:K8ptT4qVtcek2aUC/hC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90fc633a00fe7c44579ebb44387a765

Files

f90fc633a00fe7c44579ebb44387a765
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ