25d0e614dd96e320b08df20014b1db52 | Triage

Sharing

General

Target

25d0e614dd96e320b08df20014b1db52
Size

68KB
MD5

25d0e614dd96e320b08df20014b1db52
SHA1

ccc9b479fcb01f09fcab3a8b22ffe0976ca97850
SHA256

666fb7b331892055d500c569fab47694f466ab7ba27768f3cfde1d5a28b84208
SHA512

9b476259fb416d04b447847bcbf41f61207b70086477a2a1888134e07aaa9c9af6adc6ace6aebede5e579f1fa1f8f6d2d48309e9a62ee86bed74dc3c5be29e48
SSDEEP

1536:xOT2iXAOTqOTSHpLaVNHpjOTtOTWOT2iX:YKiXNb5yQvKiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d0e614dd96e320b08df20014b1db52

Files

25d0e614dd96e320b08df20014b1db52
.exe windows:4 windows x86 arch:x86

5392eb4215027734273ded9d16a256f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord519
ord666
ord631
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord531
ProcCallEngine
ord537
ord645
ord572
ord100
ord616
ord650
ord580

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ