0721b854129ad091c16fa61e2fe27db5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0721b854129ad091c16fa61e2fe27db5
Size

1.2MB
MD5

0721b854129ad091c16fa61e2fe27db5
SHA1

1f0bf5fceb50c40eb335ef864ebfcc476e65f283
SHA256

40b225e4b0b1396cd03e7c352ab1f6ccafcdf59db04c1c8931ec84f9a8d75b55
SHA512

d4b584ef3a8ebbad1d7d4752d0ca61988f8421cef38ca1a05b138b21dce401ec6c98270dfa8defdcf89f3d3d105377520b74ed9cefa1e8feb4c5602b97d98612
SSDEEP

24576:xeP6oA4cWshJEMardpnvXpCUyhDQuEEIsvjeznf1ZL/39L1DIJT7Rc9a8fe1Cw4L:rNT9jXM5ANS62nsM5nIGi4CsVYFDp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0721b854129ad091c16fa61e2fe27db5

Files

0721b854129ad091c16fa61e2fe27db5
.exe windows:4 windows x86 arch:x86

063f4b21cacd7adcec5820621c4ede99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord665
Zombie_GetTypeInfo
ord593
ord300
ord595
ord599
ord306
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ord644
ord537
ord100
ord616

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ