0b33d5d5d200a4e2b94aa7d4421123cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b33d5d5d200a4e2b94aa7d4421123cb
Size

516KB
MD5

0b33d5d5d200a4e2b94aa7d4421123cb
SHA1

7b4cf88cbbfeab3f5a19622b98766a93401fba53
SHA256

8460b4af47b53c015e4922ae74197c42e5ada53876e573d61682d5a1a08dc572
SHA512

334eebd4fec347b369495dfa82c18a0b083d7d8dd2a4fa13dd3bd14044dbce1e799de9208409c77d2987a0bebefa76e7d2c94a37be73bf47379d41b5ee6bdc8c
SSDEEP

12288:llfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCG:L8ptT4qVtcek2aUC/hC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b33d5d5d200a4e2b94aa7d4421123cb

Files

0b33d5d5d200a4e2b94aa7d4421123cb
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ