100beb3f361fab2c438cfba6d91d838c | Triage

Sharing

General

Target

100beb3f361fab2c438cfba6d91d838c
Size

264KB
MD5

100beb3f361fab2c438cfba6d91d838c
SHA1

91c7c07b680a2bb99ffe06ef51fd31daff94e0b7
SHA256

60bc8394bb6191bcfddd2cd4a5e83a32ad6310d2daf73b360258ba456efd575d
SHA512

c1bb40e7265269f9f75d61bd1965ffec4861819f5703ecc5c7222fc8d42bad38915c27bf35f26f6c80ff4bf3623f5ec7cce69c41fbfcfd2eaa458d2e77be9ebf
SSDEEP

1536:SYXRah9nifQfx2ra1+8R0/+n4omi2DZXx7wDcQsau309hV/BkmpzA3u806jQ:SU1fQfv0Y4JH30x/ZcQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
100beb3f361fab2c438cfba6d91d838c

Files

100beb3f361fab2c438cfba6d91d838c
.exe windows:4 windows x86 arch:x86

7cdfa2ccf891bc86d62f7a44415fa1cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord584
ord516
ord517
ord660
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
Zombie_AddRef
ord573
ord100
ord616
ord617
ord618
ord546
ord581

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE