020c77d8d714df58ffaa497ce81ade78 | Triage

Sharing

General

Target

020c77d8d714df58ffaa497ce81ade78
Size

68KB
MD5

020c77d8d714df58ffaa497ce81ade78
SHA1

2848c4efd67a566e1930aa4d15436a6472532739
SHA256

dee5ba450022b7864bef267548b772a5ea48175e676255319d60564202e7c9fb
SHA512

1a32ce6e6d93e38fd1706cd8d1bfdbe78de7ff41dbeb8d0a43b917bc2c4000dea1b31552ef1a17f8c956608a5845fb7adece322ffd26249fcbe00d640aa46f78
SSDEEP

1536:vMQfudFJCXkXbbWmGrElKsjF5oMoSzmUm:vMdFJukLaKsiFaMLzml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020c77d8d714df58ffaa497ce81ade78

Files

020c77d8d714df58ffaa497ce81ade78
.exe windows:4 windows x86 arch:x86

f5d5ca1cb9cc8a671515dc34f3592e16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord593
ord598
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ