21c4673468ddfc3d49741363b4d14afa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21c4673468ddfc3d49741363b4d14afa
Size

24KB
MD5

21c4673468ddfc3d49741363b4d14afa
SHA1

d0d87fc0387d8b826ca154c1bf7977c0e6ea8bbc
SHA256

5e94b0ec16bde0331e54176bd4f6e99702628c2ab6ad5f821b2c1a7f41f4cdad
SHA512

dc79bf71ece3d5df217d5ee3adb944cb1c0cdc85874a2a11fa23b3ae4a26b83e4299a3a32c736a40f4762a25c05a1955afdf09a7150db178d969ae40dfaa3c62
SSDEEP

192:UXtt+ELGsDi8DHbpI3RZLt9FgEmaNjZoW3DwraB/9K:UXttDD74mVaNj2W3Dwre/9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c4673468ddfc3d49741363b4d14afa

Files

21c4673468ddfc3d49741363b4d14afa
.exe windows:4 windows x86 arch:x86

91e6d8b6805303b55c3f698117c06f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord516
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ