2315a766601f8f53c5f4dc38aa21b933 | Triage

Sharing

General

Target

2315a766601f8f53c5f4dc38aa21b933
Size

14KB
MD5

2315a766601f8f53c5f4dc38aa21b933
SHA1

9ce0d64e89aa52239ff3ffda54223b5cf615c023
SHA256

fea1579dd5342123c1678e1d11c28c3a1cbacdd4f06ba9fcc6dfa98cb9296dc6
SHA512

50a69a86809bcf50787a4f199784529e12396f37119f186a71b9a52b3de142ba16aa467d8b22b9108bf6249d52ad5978db38b7ac3d8a03e41c286c470f45395b
SSDEEP

192:wx0cBExsUC7HwtOCFUJKLkzGdBqafyx8jmVhrrNIW6B:wj+C7HwtcKLkzGdBPUHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2315a766601f8f53c5f4dc38aa21b933

Files

2315a766601f8f53c5f4dc38aa21b933
.exe .vbs windows:4 windows x86 arch:x86 polyglot

0a18845c09e783e3cf794b3e31517b97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

MethCallEngine
ord625
ord595
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord648
ord576
ord100
ord542
ord545
ord546
ord580

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ