147556ebb9f2cacfd006de57f931b4b6 | Triage

Sharing

General

Target

147556ebb9f2cacfd006de57f931b4b6
Size

31KB
MD5

147556ebb9f2cacfd006de57f931b4b6
SHA1

88b50f9afb4d3668a39a5e2f7e3838c6d633cce4
SHA256

84aefaf7175f7bc0d50b18e087ceeb1cb181e2b4f1ce304c7d403183f6df1014
SHA512

dd4b71dd0b6c64cf341b2625b8b35cb117320b75e47774ae286513aae89c06336333e3aab406809729ddc5fd571c6a51958837bc57747f3736216ee6725b7949
SSDEEP

384:/ml+EIVfltpfALpM1b7Go/gkZlWGlVgoIa0V:qIrfwcPGo/g8lWGUfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147556ebb9f2cacfd006de57f931b4b6

Files

147556ebb9f2cacfd006de57f931b4b6
.exe windows:4 windows x86 arch:x86

a897d9b5a89d9fee1aed9ac5e504fb33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord517
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ