00840f00f5cdbca27fd139ae0eca3cb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00840f00f5cdbca27fd139ae0eca3cb9
Size

40KB
MD5

00840f00f5cdbca27fd139ae0eca3cb9
SHA1

71dfb241c5a35fae0a3d81d08eb7d0c519e73600
SHA256

b4d6061132e5c32f8cccc5212429ee7ba098ef1d3231e3abfed69e99b22a6c63
SHA512

9dd54c43f6907483d4917bc21e936a8e86189b82734165dde80659e70c48ce30f321ce366bdfdc380411f4e7bef1496d243021f348b043cb0273d8c958716410
SSDEEP

768:m1AHm7QlLi84lpyy2YwkI3DPwMerV1yCuZGS:nsG6pyy2YjI3DxerVYqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00840f00f5cdbca27fd139ae0eca3cb9

Files

00840f00f5cdbca27fd139ae0eca3cb9
.exe windows:4 windows x86 arch:x86

57122e7d641b47be109fcca21cf6d0b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord573
ord576
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ