20788d72fb873d98a5c959cfdd5a702d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20788d72fb873d98a5c959cfdd5a702d
Size

24KB
MD5

20788d72fb873d98a5c959cfdd5a702d
SHA1

9ce84f185747bb4f33d026929f4147a53ac4f0d4
SHA256

bb5457e0e619d0d1d21844df154645569398ff5b57d81aaa533074ff3d0a8ccf
SHA512

b06cb973991e0cfb46d87f5f8a965d5e3f3918dcbf1810608b23d4f1554d36b23fb3702c243b507aa759e42dac473ee1948033836c1a597261a2d364afdb37c2
SSDEEP

192:pxpfdoESl8kXXSxZCg929biIcU+Y6aisS79jp4l/Fy8FA/E6eY:pDfdoESljXXAT27+YPl6eY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20788d72fb873d98a5c959cfdd5a702d

Files

20788d72fb873d98a5c959cfdd5a702d
.exe windows:4 windows x86 arch:x86

888fa00b8db61c8c87ac62b824e4d999

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord620
ord518
ord666
ord595
ord526
ord529
DllFunctionCall
ord600
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord570
ord648
ord681
ord685
ord100
ord617
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ