15a0da087bb6a23b59dd900ecc026ebc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a0da087bb6a23b59dd900ecc026ebc
Size

344KB
MD5

15a0da087bb6a23b59dd900ecc026ebc
SHA1

4d73a01725d27a8a22408abef287407d5f0425b4
SHA256

5de003bad1d09f8249bb1a67b9f19d8ca72150bbd090bd70b40e5a6ee6b2c41f
SHA512

af5b0b66285bd97b4bfd59356d27140a0c88c9f4be6289b762f018598829916ff2576965bd9024a7f8026a710d40daaf28d66dbb7acb6569711e937fa20a22df
SSDEEP

3072:csJlOGa8bJl3Vm8yJ4fcLkiCXl5/MMzu//ZEGFhYzKT1A5S97LTMO4CozXaRsKHV:c87jM5gxu/xRFizAcMzMmozXaR51jmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a0da087bb6a23b59dd900ecc026ebc

Files

15a0da087bb6a23b59dd900ecc026ebc
.exe windows:4 windows x86 arch:x86

dc5ed6518320616a5bda1f08462ba9b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord626
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord645
ord570
ord571
ord576
ord100
ord617
ord619

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 232KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE