18a9b94e6b7fba05feb822d73df6120e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18a9b94e6b7fba05feb822d73df6120e
Size

492KB
MD5

18a9b94e6b7fba05feb822d73df6120e
SHA1

f3b91fcf17c42ca58c075c812d9d79a46e0476fe
SHA256

6ac1e86324b714e4a17a5340802e1c7976e2798cde1a63be3718622c3bc64446
SHA512

305ca61c1b05efee6b6f337ac380226b2ec2edd88c1f67ba176a7756d3e172fb6466cba65406d2b9da7816f1db4ab51e7b30a109c54041162d7253824cf0fbe5
SSDEEP

12288:+lfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCGj:48ptT4qVtcek2aUC/hCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18a9b94e6b7fba05feb822d73df6120e

Files

18a9b94e6b7fba05feb822d73df6120e
.exe windows:4 windows x86 arch:x86

87e1eff45d4b9d65f275a3b510f16b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ