137bdc35e1e967ce39f237a2279164bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

137bdc35e1e967ce39f237a2279164bb
Size

76KB
MD5

137bdc35e1e967ce39f237a2279164bb
SHA1

db5a9d4e488b5022153e0bc2a69f170a6a256461
SHA256

d4c90288020327d3543c40c5664acb1f8094eca7a0460e4029ca6a751cee66c4
SHA512

c2dd924f1f172288cb205d46cc44217b02d7bc26f09264a5cbad06175756c6363d9248f83ef59b2ef52e79e60c1dd7beb9c8907c1f4488c3b02fb67c0a211bc9
SSDEEP

1536:3byT1631F4tmBwbUyfkimtoGWg1XDMIBWLk:3p31FHBwbzkimtoGWgFoIB3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
137bdc35e1e967ce39f237a2279164bb

Files

137bdc35e1e967ce39f237a2279164bb
.exe windows:4 windows x86 arch:x86

fb9f59cd54ca6151f14216d948a70933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord518
ord598
ord522
ord631
ord525
ord526
ord561
DllFunctionCall
ord563
ord670
ord600
ord601
__vbaExceptHandler
ord713
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord681
ord100
ord616
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ