20f1470a385561625e2dc46b52c55c26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20f1470a385561625e2dc46b52c55c26
Size

320KB
MD5

20f1470a385561625e2dc46b52c55c26
SHA1

9bf3d182862b485b38ddf57036fd998e0ea608e3
SHA256

75e9112a682dbdcfe3cc5238b9d551cfd33d70786c03246cb66be5304d872d6f
SHA512

8913d0fd5427c2ab2c23327f905636ad17d62e0a9ee9a9143add51b3e3cdf587c5e364de36cfb87b02201f0b65f5d54837487b7231ca62e98975b54621880f4c
SSDEEP

6144:tl7GXqmdEz7Ijo457klNdCQs5P3sQFuf8pgcQWKg8vD3HGxK0roSGXq2uhxLGdVx:tl+Cz7Ijo4BaNddKP3sQFuf8pgcQWKgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20f1470a385561625e2dc46b52c55c26

Files

20f1470a385561625e2dc46b52c55c26
.exe windows:4 windows x86 arch:x86

31676f11c58b111730f8522fb16134dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord100
ord619

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvj
Size: 296KB - Virtual size: 4KB