11845dee0bf3cd96922465e5439b134d | Triage

Sharing

General

Target

11845dee0bf3cd96922465e5439b134d
Size

209KB
MD5

11845dee0bf3cd96922465e5439b134d
SHA1

f10f599f567a0e51a5b0a98fdbae6fbadb6b4916
SHA256

72027831cbcdb710575643277a770867fa1f658ac98d52efc26863d0c784012f
SHA512

c45f415a1d1072609f6c09891c195eaa1d00ea2e20df28246c19e31945a1fbb3acd276c046ae6a26336e4a1ef47633ce83e8ca946db891aad42e243423165b84
SSDEEP

3072:42sq5ciC2Rj1PFrz2pja3JPlHE4joUd08KeTvqcYd57BWnjQEBnPezCfFKNAIeEx:iIzF/4mhb68Ke27Wj55PeeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11845dee0bf3cd96922465e5439b134d

Files

11845dee0bf3cd96922465e5439b134d
.exe windows:4 windows x86 arch:x86

927b0708a5d9b579187ef1e0d5019da0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord709
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord645
ord570
ord648
ord681
ord100
ord579
ord616
ord618
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ