0149c8e9a37a0c8e47d662121e2c17ab | Triage

Sharing

General

Target

0149c8e9a37a0c8e47d662121e2c17ab
Size

136KB
MD5

0149c8e9a37a0c8e47d662121e2c17ab
SHA1

4567cbf05d19a955d65becb7bacb3f32a7656988
SHA256

983f8e3a50a608d2f4fc58a7df27d02e5cd8256b31eebaee42fdee34ffa07eaf
SHA512

28ead46a494b1ebc10041a7c9322af4a61c0334119f7db5182c5b7af8aae0346ff7e53b91016f00c05731363b7d754112805ebd0500cfe4073708e6dbaa12cdc
SSDEEP

3072:k87MN1Hbo9qGYy9WwShu/bhLOc+UAJoFEmaC3e:lYkqGYy8iDhLOc+zJaEmaCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0149c8e9a37a0c8e47d662121e2c17ab

Files

0149c8e9a37a0c8e47d662121e2c17ab
.exe windows:4 windows x86 arch:x86

3d691cc22d17e8687cb046770a00fc6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord621
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ