0d01b3232d2a54434ec8d1ae6ef5ad33 | Triage

Sharing

General

Target

0d01b3232d2a54434ec8d1ae6ef5ad33
Size

156KB
MD5

0d01b3232d2a54434ec8d1ae6ef5ad33
SHA1

4fc1e37d83f572eba48e5738747f7b449256ed6b
SHA256

d470f2752b9a5a176cbfc35f8afaf5d4f6b17890c6c837023870ca7f1d87f3cb
SHA512

248ba86af298de84c06a6b36bb08c2404f40908e690473f0b4006049711578d06ff2c5f7128e9c04ec9e62ded96efa9ca7516454109efd803c497d3400e95308
SSDEEP

3072:NK43KwzIiasWtuMLR+wWNzatDpr6SkiuwI7HkxuFmYScdJPa:Q9lHEratDpOStu0xM//Pa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d01b3232d2a54434ec8d1ae6ef5ad33

Files

0d01b3232d2a54434ec8d1ae6ef5ad33
.exe windows:4 windows x86 arch:x86

8320c9944aa515d7c6c6ed5eb71b1dd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

msvbvm60

ord696
MethCallEngine
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
Zombie_AddRef
ord100

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ