24d6bb2abe2c371d8fc751d197bc46f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d6bb2abe2c371d8fc751d197bc46f4
Size

316KB
MD5

24d6bb2abe2c371d8fc751d197bc46f4
SHA1

6aef0f782af90dc84898420bdc6729ce769feec0
SHA256

704aecb4dbb480dbac5d070e36cc1ebf5d34742a1d6ec90078dcff3b1c8dca69
SHA512

ef32d65de5db10967ad08985e55442fbba3cdab099dae8c6a3133accf812b16e428d3aee481c303c5b37d69a91f13136a81754c3edd0181c52ba383e7d57afc8
SSDEEP

3072:84OzD5gnaOdmLGeCfcpwA5f3CEoEtUMbfpp6ru:9Oz/OK7cKiED5W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d6bb2abe2c371d8fc751d197bc46f4

Files

24d6bb2abe2c371d8fc751d197bc46f4
.exe windows:4 windows x86 arch:x86

88f7f2ad99f6046dad51d292e3ca21d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
ord696
MethCallEngine
ord517
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord527
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord100
ord431
ord616
ord618

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE