1b8f3b780aed6c5bd37c9e683597bf20 | Triage

Sharing

General

Target

1b8f3b780aed6c5bd37c9e683597bf20
Size

79KB
MD5

1b8f3b780aed6c5bd37c9e683597bf20
SHA1

9767d4e4ac9cda0bc10d72d87c338efc6eefffa1
SHA256

8f68bacc1bb12d843865e89411dbd5d668e24b1720da8f44d735783ea1879887
SHA512

809469062517df3738e327ea99d5c4b96e71dd3d290973388324ca49de0dd55ae5c5a39c619c46557f40dac60c05ac221a5471bd331a764af90f903e84b4c771
SSDEEP

1536:rzRoKwgjPtiKQod7Giz7uY0xC+gegAvKcykDXn3rlTqBmEh:nRorUPti1u7DPX0I3maKX5TqEEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8f3b780aed6c5bd37c9e683597bf20

Files

1b8f3b780aed6c5bd37c9e683597bf20
.exe windows:4 windows x86 arch:x86

cd81becf486c9d62d6f95dee4dc59988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord526
ord529
DllFunctionCall
__vbaExceptHandler
ord711
ProcCallEngine
ord570
ord648
ord578
ord100

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ