1ebaa6f4a8980729c939bde765754662 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ebaa6f4a8980729c939bde765754662
Size

24KB
MD5

1ebaa6f4a8980729c939bde765754662
SHA1

2f9746df2d300c416aef3228e28340731d302cf8
SHA256

9c0ad7e761d69bc6a0649724d7840ebddf3b84a5c8b80ae5f4093775fab57c9f
SHA512

4281f3fdc7fb42da338b94c74d86b884c9c203c88deffa5c0b4a19f6fd77eb7381bb66383090aa1b255aa9ead2e4940141e34f266e0510380660681c5d6db97c
SSDEEP

192:St8c2s+MZ2H6wP8/SUZa8zmzdGiHPBv+wTvTH6wP8/SUZa8RhIjVhS:/uJPw+SUbmzMcZv+Auw+SUZhIjVhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ebaa6f4a8980729c939bde765754662

Files

1ebaa6f4a8980729c939bde765754662
.exe windows:4 windows x86 arch:x86

25e04add64d43b80b6d8ab7eb05a28e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord698
ord593
ord598
ord631
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord570
ord648
ord578
ord100
ord617

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ