1dd01f6fa0f1cbf6096356a66ca2e6a4 | Triage

Sharing

General

Target

1dd01f6fa0f1cbf6096356a66ca2e6a4
Size

16KB
MD5

1dd01f6fa0f1cbf6096356a66ca2e6a4
SHA1

bf2f2dd10c32dfc75fcb32e5f4ed493d029b0162
SHA256

ad3566d36a937376074a2b517223c9c3dd6de3076981d9ae80c1b3fc4e3fea47
SHA512

51fa025992bd1acb56741ad21cf0fe81957e160748cfb4276c3e6b26b551f70ebdd63b89ef471e8ea5ebb3f785c2d4ffaf2bc997c3dca8663e4ae60a36cefad6
SSDEEP

96:TYeR+yo/FrVMNw3ICJCJGF5Bpjwjo3tosEW4NgUOPKBM2Q:bR+yUrVMrMF5jwjo3tosEWxPQMb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dd01f6fa0f1cbf6096356a66ca2e6a4

Files

1dd01f6fa0f1cbf6096356a66ca2e6a4
.exe windows:4 windows x86 arch:x86

e78672a14e88bbfca47620a73d5d2a46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord666
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord716
ord645
ord570
ord100
ord619

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ