17378dcfc73f98c36ead2ac78833632a | Triage

Sharing

General

Target

17378dcfc73f98c36ead2ac78833632a
Size

209KB
MD5

17378dcfc73f98c36ead2ac78833632a
SHA1

54b2f19266843be61fdb63bc42df4d727e8e42d8
SHA256

62cada136c266ef3d2144bf35cd1c7515433df266d47aecf0414452b3dbdf4d0
SHA512

f1787ef13ff5ab9a1ab3459d8ac3f8c0ce03f209079ab98dd7c5f66f0085f8805620031229fe79c3bff3d3eb346856a9b2ebd4c4733dc5612b198d74476931d5
SSDEEP

3072:MZWTyIBjZZAVtXcCB+ddE5NwNrD0B6rwAO/1rGdayxj/jITaIP6UdGUxQ:QqdDZAVtXcCB+HDgUwAOy3DjITaIPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17378dcfc73f98c36ead2ac78833632a

Files

17378dcfc73f98c36ead2ac78833632a
.exe windows:4 windows x86 arch:x86

bf0fe508dc44fdc8996b9278d6c977cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
DllFunctionCall
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ