0905638e5e629a6b57b0db5c7502f8c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0905638e5e629a6b57b0db5c7502f8c2
Size

244KB
MD5

0905638e5e629a6b57b0db5c7502f8c2
SHA1

cd4b7dc6646c03b0c969b2d3b9796e4f5fc07bdc
SHA256

4d81578af0c8e6dc4393d787c2dea5ef6b8c861d72dc4c4d80d08b92a3af6da4
SHA512

266d1a59ee851b9a1a18552b830bd05998a5bdbf7cf837680ecbf3730e44fcc1849e93fbfe2daa2f70376f60e6f3f6a6d1c3482644fc1fe3482e4f9744450177
SSDEEP

1536:WGgMJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJ6wmOSUIED:WGzX0e1FB/DpKjCLHAmOSV18bZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0905638e5e629a6b57b0db5c7502f8c2

Files

0905638e5e629a6b57b0db5c7502f8c2
.exe windows:4 windows x86 arch:x86

6439ccb892f285ee92ab885871e1dbe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord696
MethCallEngine
ord628
ord665
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord537
ord100
ord581

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ