1a1f8285993466fb0ee71d5912778256 | Triage

Sharing

General

Target

1a1f8285993466fb0ee71d5912778256
Size

92KB
MD5

1a1f8285993466fb0ee71d5912778256
SHA1

06a17bff0247b96291b37d0397669d096790e8e1
SHA256

1a8c93c78ecfd47cb5482232a0f6460b39f76cbc85b908e33e289d79b1583357
SHA512

5c9a70f1aee8eb02e08c4c8a5330238f8d8b2850aad5aa3c274369ef6bb0cc08496a068a8e8163044eca32ad13d03bce907c9dd7c8e7dec0c5540ac5ff7b97f5
SSDEEP

768:N3cfXx0Fc5PfsMdVBOfaYVp1D6KjG4enXmUt1BhyQV5czXW9h2wcUwE8eo6qLZgm:xFiPfsMduyYihhUzXWGB20ZNefh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1f8285993466fb0ee71d5912778256

Files

1a1f8285993466fb0ee71d5912778256
.exe windows:4 windows x86 arch:x86

9476f7d366de70d57138e3403983cef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord660
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord685
ord100
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ