25349efe23800ce049cd4da9d9a91cd4 | Triage

Sharing

General

Target

25349efe23800ce049cd4da9d9a91cd4
Size

12KB
MD5

25349efe23800ce049cd4da9d9a91cd4
SHA1

6b3617c1da6ebb685533d29a4ff9fe02d2999b95
SHA256

db74ff816ea89e40e9dfc27eed6aab4db0021e4db745c66f66b45d83ac00b4d8
SHA512

f982f48cea77846c40859aa9f06188796cce34632eec4db7dc42a92b8b08dcdaad29c41dbe7a9c9d793e810b9fc58b546d902f9fcf04f9e68de64754b421a316
SSDEEP

48:ag+SKo+sbwdLWP6lIliLcUr2Ykq8jffcenqM7UMHbKHZlbv+/rM3c09V7wntbK2o:2K9bwdLWPUP2YMjMenrTbOrbGAMns201

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25349efe23800ce049cd4da9d9a91cd4

Files

25349efe23800ce049cd4da9d9a91cd4
.exe windows:4 windows x86 arch:x86

b73f2c7aea6d071f18b0342a019785cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord666
DllFunctionCall
ord600
__vbaExceptHandler
ord711
ord607
ProcCallEngine
ord570
ord100

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ