1fd8f14161c79fc4d2adb2da7bf865c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fd8f14161c79fc4d2adb2da7bf865c6
Size

98KB
MD5

1fd8f14161c79fc4d2adb2da7bf865c6
SHA1

9a220750569f2e327acac240cb8c6d05679e29d7
SHA256

aed2eb1b278e891a5d25ad5557504f18eea5641a98bdcf1c55bb91b85b6fbfd2
SHA512

022bb11391e24d12799c6a4fad375823a488bb7755fa6776c7fb07c9fa7bf601ab832026ea336a87a58d996caefc725621b37fa2b2e00e41e86dc676b6ae5a05
SSDEEP

1536:N3dqm1lFrze6m4ZyXB8oN/zAMNd0EqpkN5amIi1dxhLd10h7huWc4+PJ3:PlnFrq6PwB8hfV27dxhLd10ZhuW+PJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fd8f14161c79fc4d2adb2da7bf865c6

Files

1fd8f14161c79fc4d2adb2da7bf865c6
.exe windows:4 windows x86 arch:x86

d69c6479660f6fc7022a75a7d35f4ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

__vbaVarSub

Sections

.text
Size: 66KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE