21f925d58f89c3a34ce16b12e69a8df1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f925d58f89c3a34ce16b12e69a8df1
Size

92KB
MD5

21f925d58f89c3a34ce16b12e69a8df1
SHA1

b6fa181bffef6a0f5fe9f92b5d221e68709c54f8
SHA256

647e0ad9b22724300d3668c27d345b77cf7b60cbafb9ac388f37725037262013
SHA512

bd4dae986c3804e42856b2761616aea46e1691c0905e9ab91a9290b317f41dab9cb030ee72142e7d89b9593805fbb6a8098b2855f4c832c39abd31d6ef3b0819
SSDEEP

1536:fztCYgnSoQllL2Nbl54cpmutNkS/eiZ7JUPh8hFgd/7QnUb/cI4zCF7/wqhgY:L5gnSBllL2Nbl5DmutNPHZ7GJ8hF2b/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f925d58f89c3a34ce16b12e69a8df1

Files

21f925d58f89c3a34ce16b12e69a8df1
.exe windows:4 windows x86 arch:x86

e5c8aee02ff0fc887b93f482a6327f9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord631
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ