1cc1e8228656d6dbc1938404555e7afb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cc1e8228656d6dbc1938404555e7afb
Size

409KB
MD5

1cc1e8228656d6dbc1938404555e7afb
SHA1

62b427fb651fe75fc4b3d288c8c958a17eb0f563
SHA256

43c2cfba25c0721e37ffc2d2b933bbd345c9f0341532533f51c278a785d768a0
SHA512

6a6e8a88311dfce61e9b45ed41a650d71863871b397524d96201e8cf5972b50458408d5e14a8b21d70a010fb94823f6c4d73b7cfdcac39e15cc90c291c64f9e1
SSDEEP

12288:/oCzwNn9TuH53y0FITX1RmS7GvL1S6/cE:gewXiHkjgDobE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cc1e8228656d6dbc1938404555e7afb

Files

1cc1e8228656d6dbc1938404555e7afb
.exe windows:4 windows x86 arch:x86

70dd43dc35e457377872e941db49be6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
ord595
ord526
DllFunctionCall
ord563
ord600
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord570
ord576
ord100
ord616

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ