0a042f22173a1b6f05e26c778e3c473b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a042f22173a1b6f05e26c778e3c473b
Size

543KB
MD5

0a042f22173a1b6f05e26c778e3c473b
SHA1

52cb5ae034a7528e4881ea7f9c6ab7c6010fb9c0
SHA256

6ccbdf672a50eff0bf24316c5b83c314ba538d70d9adfb4e09dc36bdb6822644
SHA512

df29b4e2c0992a9eb71daf861f4e512459d72bd01eba86d0a6451d46ab17d14e82d14709877667fbfa3a1d3ebc37a60fe07f2071d9b09864e1de60f795415295
SSDEEP

6144:F56dOyO33HOH53v6Ia3z3bQ33jSGcJLvSs8urqhz4RT:T33HOH53v6Ia3z3bQ33jQlJJJh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a042f22173a1b6f05e26c778e3c473b

Files

0a042f22173a1b6f05e26c778e3c473b
.exe windows:4 windows x86 arch:x86

d01808d7ee44a15dbefbc58f370b3276

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord626
ord666
ord595
ord520
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord617

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ