18ddb968c4c30be52b6e5599cd0c2847 | Triage

Sharing

General

Target

18ddb968c4c30be52b6e5599cd0c2847
Size

176KB
MD5

18ddb968c4c30be52b6e5599cd0c2847
SHA1

94efe616a96fca43cc32d261c0b1c0cf2e78564c
SHA256

75fd427c07ae58b2bf4276e7d9eefe5d3ecc2cc20d6c18a628d4c09c0b09426f
SHA512

2ea5d2a94de08cf5015a057423118e64df5b2abc480d594a4e33e4bab4de0c4b8ec8c3e6ba4ee0a3d205ba7404a04d480b72b4203d1e0a9adbd7e5015191f974
SSDEEP

3072:oY/rc9/6g9NgY3AE7XbQTMS9QtoMktFKsE:8uV/Ks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18ddb968c4c30be52b6e5599cd0c2847

Files

18ddb968c4c30be52b6e5599cd0c2847
.exe windows:4 windows x86 arch:x86

131ae01b3ec014d6adde5cb345b0d553

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord660
Zombie_GetTypeInfo
ord300
ord595
ord599
ord306
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord531
ord319
ProcCallEngine
ord537
ord645
ord648
ord570
ord573
ord681
ord576
ord578
ord100
ord320
ord321
ord616
ord617
ord618
ord650
ord546

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ