133d8aabd56467cc0907e7eb69d1b0c6 | Triage

Sharing

General

Target

133d8aabd56467cc0907e7eb69d1b0c6
Size

16KB
MD5

133d8aabd56467cc0907e7eb69d1b0c6
SHA1

42fec718d4a7c679c8b6a805c6493173586b585d
SHA256

b1fcacd65748ea737da223ecf7376945f4df9806e17afb51fd8989bb2fef8e7d
SHA512

75ab94b42131eec45cae96bfd45180f819a9bc1635b15315f49449861d260bbdb6ae56d51fd3008e6ed820c39c88ef89e601aa7c76a0546b5f8b5158f1888611
SSDEEP

192:jTRNqqCA5fIts3/iUqCUVcqD4UXna4/rQnDA+mDmXiEfjUs:jTRNqdAdMla4jQDdXiEQs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133d8aabd56467cc0907e7eb69d1b0c6

Files

133d8aabd56467cc0907e7eb69d1b0c6
.exe windows:4 windows x86 arch:x86

1d2fe3832e5501ce4cf90fb4400547c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord526
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord570
ord100
ord579
ord616
ord580

Sections

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ