22eb547a864aabaeff36d5558dadaef9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22eb547a864aabaeff36d5558dadaef9
Size

88KB
MD5

22eb547a864aabaeff36d5558dadaef9
SHA1

5b92ab2cd21634a638f2c1a52b536554e08ebbf3
SHA256

3aff070d273daa2d1d94ee05279beb6d091327d368c2f527c8c5fd2b9917ea77
SHA512

f56060aaf5334f14f1d98399530e5b3088df8689e455defa1f115c58c027dd3c473e02f6923b4f2b2bfb1c836f590030c84157e2ed0803eb97d00c5b89179e8a
SSDEEP

768:wnXmUt1Bhy3Z33lOa88HvympJ6vzJG1D6KiGYiJAWZcZWiMDnj/U6bec6W8Pk5ZH:4h+8a8QvyiS+cZWljgu8ECzeOh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22eb547a864aabaeff36d5558dadaef9

Files

22eb547a864aabaeff36d5558dadaef9
.exe windows:4 windows x86 arch:x86

9476f7d366de70d57138e3403983cef7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord519
ord660
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord607
ord608
ProcCallEngine
ord536
ord537
ord644
ord645
ord648
ord570
ord571
ord573
ord685
ord100
ord616
ord617
ord619
ord546
ord581

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ