24a58a6d0c1ca9663f0b5439b36e0d46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24a58a6d0c1ca9663f0b5439b36e0d46
Size

28KB
MD5

24a58a6d0c1ca9663f0b5439b36e0d46
SHA1

a3f74067aea3cb9bcff2261f8dc91d2fdea49b2b
SHA256

743bb2707120e12206bd831cc5310bc151c6382c4c47e236124d1233f13d984f
SHA512

72869aa45c250d5a198035a9a76ef208110b3eeebcd528e7c6933c3502968b16207c9faa566a5d63aa4784425c96c51d91859894bcaadf7e4dfd4f7663142ef5
SSDEEP

384:YN6dHcM3y/FgMY/lnflPirRsIcKjKKqCCSJ4lD/hiIDgqgS:3dHC/FgMY/lfIDuSTKgqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24a58a6d0c1ca9663f0b5439b36e0d46

Files

24a58a6d0c1ca9663f0b5439b36e0d46
.exe windows:4 windows x86 arch:x86

3931d856198fc0c285ee48cbcf10dfca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord617

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ