21805e7681faccb32817c625fc649263 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21805e7681faccb32817c625fc649263
Size

16KB
MD5

21805e7681faccb32817c625fc649263
SHA1

dc1d391ad863a8da09d8801c48c936f0d901f6e9
SHA256

35e1e22e3f167c4cc8b16075456a604dee8230a942b57dd12798650ddcc87175
SHA512

17394554941d6fc5885e8a929c811b781240fb6491e018c3db56d0c6cb7bfc8c4ab6c6205a759b26dec9db809768b51e74c328b2cce7848e82b91e35515d8422
SSDEEP

96:9cG3QN2ILETLlC3Qh5RqQ+3neXDjlg0V5/lprZDiL/Np1dYKj/2dCs1n1AS1oR1l:v3QN2KETLRV+y7xlpkOKTiPlFe5BM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21805e7681faccb32817c625fc649263

Files

21805e7681faccb32817c625fc649263
.exe windows:4 windows x86 arch:x86

eb6f38be18b4aa522d212d68e35dbad6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ