21cc850ff54ee416f390dbbd9e6c3142 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21cc850ff54ee416f390dbbd9e6c3142
Size

48KB
MD5

21cc850ff54ee416f390dbbd9e6c3142
SHA1

7ecf95107ed992991c8a07f2682bde2a8d5890aa
SHA256

829e8c1cdb1f2aab49e125d329b8154e7382cd99acdc265d972aed8cfe2c335c
SHA512

1734e1cdd3913d8ff2c75baffcf31661a1421da0a254dd22ba10f7720fbb6ff6b592baaecef7c7a8e8028aec2c7913465a6f41e30fc1f33caa399844fa7ff00a
SSDEEP

768:8ZZt1cYgnSoQllL2Nbl3p4YQkIkmu9oYN0tY3/eiZIPGo/g8lWGUtoXG3:8ztCYgnSoQllL2Nbl54cpmutNkS/eiZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21cc850ff54ee416f390dbbd9e6c3142

Files

21cc850ff54ee416f390dbbd9e6c3142
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ