1fd772a0463e6db38f9072e3e49dc9c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fd772a0463e6db38f9072e3e49dc9c7
Size

244KB
MD5

1fd772a0463e6db38f9072e3e49dc9c7
SHA1

5b3e251c99058de49f194f6409fd8880fb648dc5
SHA256

217d1eb5606b52e3f703c53cfa4ab9a1a907fada7f24feab7e0c3d663ead0dc9
SHA512

c0c02bcbc27fbcd554def91cf6521c9b4f46f4b8a4d02abc88bd82a76a3f81a0cc76e05f6fc980716ee6028f6c18d60003d45cc29ddcf030ba353b556ef3c1c5
SSDEEP

1536:RMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wGfu4qhuC:mX0e1FB/DpKjCLHAGf/bC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fd772a0463e6db38f9072e3e49dc9c7

Files

1fd772a0463e6db38f9072e3e49dc9c7
.exe windows:4 windows x86 arch:x86

200973fdddc320c64a7fa337c8b0aa6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100
ord616

Sections

.text
Size: 236KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ