24fb9009c25fa4502796b4394d2467c6 | Triage

Sharing

General

Target

24fb9009c25fa4502796b4394d2467c6
Size

60KB
MD5

24fb9009c25fa4502796b4394d2467c6
SHA1

1f2f0aaddc80d588b65610e0ab899b21123d6a02
SHA256

ae1efafda4218e70d1b3be7d40aca6236c1e4021a656eb8e007b856d97c857eb
SHA512

7744ad0a6cf0f36e4a54dcb3e282bc9fcdb95d6e3b0b77b83ca3d80fca58afa9729211430c252125a38102f3dd6f6085bd7410cc7c3e034ca8508f72427174a7
SSDEEP

384:Be/+Le/MJAe/tfF1O5mekfeWoPS7XHdaXf2kq5mekfeTe/NfF1Oppe/He/+:4reR5nOwekfZoPSD9FRwekftZnkQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24fb9009c25fa4502796b4394d2467c6

Files

24fb9009c25fa4502796b4394d2467c6
.exe windows:4 windows x86 arch:x86

5c9ecf31e21ba73627229c0edf1df437

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord595
ord598
ord520
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ProcCallEngine
ord537
ord645
ord578
ord100
ord616
ord617
ord619

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ