1302a1224a82beee76d1fd50388520e5 | Triage

Sharing

General

Target

1302a1224a82beee76d1fd50388520e5
Size

20KB
MD5

1302a1224a82beee76d1fd50388520e5
SHA1

e7a512608d6debd5f479e812376d16f0d1667e3b
SHA256

e91c452543336aaf9f49ef6b177a766b06d244cfb4c947439f484adc3b2e0421
SHA512

9d7669f15acde0701cd0df59fc01db6f84904dc6ade9dcabbd5e68e3de10da635b6eb7845f2562c712e079c9586d2886a7b67aa7f58edcbf19c2f43efc10b7e6
SSDEEP

192:Z22yNQVDz/8eyJM4rEoTM5bKpMlJmuDs:f60/pyJM4BkbgMLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1302a1224a82beee76d1fd50388520e5

Files

1302a1224a82beee76d1fd50388520e5
.exe windows:4 windows x86 arch:x86

927b0708a5d9b579187ef1e0d5019da0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord709
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord717
ProcCallEngine
ord645
ord570
ord648
ord681
ord100
ord579
ord616
ord618
ord619
ord580

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ