11d912d6cabdddd95bc27f2035e4adc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11d912d6cabdddd95bc27f2035e4adc8
Size

64KB
MD5

11d912d6cabdddd95bc27f2035e4adc8
SHA1

389ff33bdea34324151d91c02d16a8b552bbc2d9
SHA256

7d8b3b5ddcd3331a8cb4306cadd8557642df07aaeeecf1b74c6f741ed20755b9
SHA512

bb93b7400527c83a907ea9f65452655aaeb7433b9683353882ddc39ba277d21f2ab11fe307559b63b6462698429ff8216fd42686012e8b27771ac3b1af054cb6
SSDEEP

768:vZXtV+2p5dk927t7zfaaXukpZMPrrNbKg1QdMiuc6bdU:x9IH27t3cDR2juc6bdU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11d912d6cabdddd95bc27f2035e4adc8

Files

11d912d6cabdddd95bc27f2035e4adc8
.exe windows:4 windows x86 arch:x86

2e50e8576db1d6b7032e43d780f368da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord582
ord583
ord187
ord693
MethCallEngine
ord516
ord518
ord626
ord593
ord594
ord595
ord596
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord530
ord608
ord717
ProcCallEngine
ord535
ord644
ord681
ord685
ord100
ord616
ord581

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ