23b1f769bdac291ba396f687260087d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23b1f769bdac291ba396f687260087d1
Size

232KB
MD5

23b1f769bdac291ba396f687260087d1
SHA1

d51fd51e9727e5a497907e347017ec8f51a91baa
SHA256

798d9a78882e13f8017f68737194bc9ebaf111a06361f9849b7efa3442d34345
SHA512

5c0e00263ba7797124bbb86f2a2083785067d6652ba3ab869b080cfb9940b1956dde92bdf516101b9c099f5b7c49d64ff4a24d890489a6d4b4a898c7d46c5069
SSDEEP

3072:QW+STfYHYXoGq2wTTL52y94G1XNZVaxkwQ9SnwD542A2y9DDfcnusTdo7/tUBB26:QlL52y3do7/tUBB2ykUzbhaciBBbe9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23b1f769bdac291ba396f687260087d1

Files

23b1f769bdac291ba396f687260087d1
.exe windows:4 windows x86 arch:x86

f45f62a631707eb80308ed221319421f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord631
EVENT_SINK_AddRef
ord527
ord528
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord100
ord431
ord617

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ