1efde8ab2ab976e88e627cde3af413a8 | Triage

Sharing

General

Target

1efde8ab2ab976e88e627cde3af413a8
Size

24KB
MD5

1efde8ab2ab976e88e627cde3af413a8
SHA1

359a666e0eaddbca21917be2fe8e0661ee528587
SHA256

3b251e9643665b8f62ae052ce9d7081fff0d55ff2f1d12660d2234a54d457640
SHA512

0601d607769ba6efe434ff7f164e502b6f64d14f07d34c920c44f6e3f9fb9d0b6f94846fd80682386945cd47fe019a544e9b564561bc1f8b7fd07b04b03dc900
SSDEEP

384:1ZF9AY1/8e/+PI9abgSM36BjxrIr9vtWMzte/+P:1RAmdz9a5M3yxsdtWcU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1efde8ab2ab976e88e627cde3af413a8

Files

1efde8ab2ab976e88e627cde3af413a8
.exe windows:4 windows x86 arch:x86

b7fde74e5880b43ffe6d2d4bb1159658

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
GetSystemDirectoryW
GetDriveTypeW

user32

GetDesktopWindow
GetWindowTextW
GetWindow

msvbvm60

ord587
MethCallEngine
ord518
ord662
ord595
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord713
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord538
ord576
ord100
ord610
ord616
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ