1bbf1effcf89dba04932b7c6041dcb14 | Triage

Sharing

General

Target

1bbf1effcf89dba04932b7c6041dcb14
Size

68KB
MD5

1bbf1effcf89dba04932b7c6041dcb14
SHA1

4ce3aea00592b6432274c8fce468549bb3fe9617
SHA256

0b150c3009e7193239ebe25e5824f0d803a39ed27f2921fd342fd656f39990cf
SHA512

48f0077676040a30d91c18e832a4b29201e35fdc8e0f3bedcc2829ac843647874a5af0f53eefb6a50724a8a5f657d2a9d68eec6710973d8023f581fabc2940f9
SSDEEP

768:0MBhM70KRva8OnEdxpAmborT+p6BXnN9UemDxYCRTNH/d2UoJ/eE:0MB8cmkmb0XNcq2NFRoReE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bbf1effcf89dba04932b7c6041dcb14

Files

1bbf1effcf89dba04932b7c6041dcb14
.exe windows:4 windows x86 arch:x86

d149ce855ccb85a21966a23cb9a790e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord660
ord592
ord300
ord301
ord595
ord303
ord306
ord307
ord309
ord709
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord607
ord530
ord608
ord317
ord318
ord533
ProcCallEngine
ord537
ord648
ord573
ord681
ord576
ord578
ord685
ord100
ord579
ord616
ord617
ord580

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ