1218e26f9a85c686a4aff0ec7c25a32e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1218e26f9a85c686a4aff0ec7c25a32e
Size

240KB
MD5

1218e26f9a85c686a4aff0ec7c25a32e
SHA1

0da054c0268e5dc40ff339741858cb982d5d28e2
SHA256

93faed402c1c9e4f326bda31aef748d56a3815970b13ea84ef6a3d00b7cbac7b
SHA512

e1bfd73930da1011946fca5e28fe1e2934791d0336ff417827ddd40317be6a08ea007a09c99feae11e4f775aadbf01b58b0511e2ca10e8a06f0b0911f357d0fb
SSDEEP

6144:CzcNx8H9e6dDL5JECZzxqeqAKmfRVIPUeqGC0TaSunyfMgFI42hCFvNk1Ros6pmd:CzcNx8H9e6dDL5JECZzxqeqAKmfRVIPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1218e26f9a85c686a4aff0ec7c25a32e

Files

1218e26f9a85c686a4aff0ec7c25a32e
.exe windows:4 windows x86 arch:x86

8875c0f59d84bf21cdf90e5f261d850e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
rtcRgb
MethCallEngine
EVENT_SINK_Invoke
rtcAnsiValueBstr
rtcLowerCaseBstr
rtcTrimBstr
Zombie_GetTypeInfo
rtcMsgBox
rtcDoEvents
rtcSendKeys
rtcMidCharBstr
rtcMidCharVar
rtcSpaceVar
EVENT_SINK_AddRef
rtcIsNumeric
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
rtcStringVar
rtcVarBstrFromAnsi
rtcStrConvVar2
GetMemEvent
ProcCallEngine
rtcBstrFromAnsi
VarPtr
rtcCurrentDir
rtcFileLength
rtcHexBstrFromVar
rtcImmediateIf
rtcErrObj
ThunRTMain
PutMemEvent
SetMemEvent
rtcLeftCharBstr
rtcR8ValFromBstr

Sections

.text
Size: 229KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE