13fdc5129d7d296c0db59ebe330ca898 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13fdc5129d7d296c0db59ebe330ca898
Size

26KB
MD5

13fdc5129d7d296c0db59ebe330ca898
SHA1

08e3c9394ffe3831d3c69eea50f76e927aa76367
SHA256

13c2c2d64f427148f974ca69c87ec2d5d1ab92471783fe758ba8da0b043d9adf
SHA512

291d40741610f01502da780ac347536aea9c8ca6a74d5be15b3819e68cf5d650e2e4a0de9a659355e27ae900ccc27d5a4c93df6f4489d524e3c74437114f9268
SSDEEP

192:4mpfze5lgkkmXKNSIse/8DWB4oH3T9F7K7o/BIrjntkZOAVZma1lz5N/2o85G:zKBkm6dQ24eb7Go/gkZlWGlVgov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13fdc5129d7d296c0db59ebe330ca898

Files

13fdc5129d7d296c0db59ebe330ca898
.exe windows:4 windows x86 arch:x86

498c31d9d915898434b7b956f421909b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ