25ef38ca333cd0f73169206425c29767 | Triage

Sharing

General

Target

25ef38ca333cd0f73169206425c29767
Size

444KB
MD5

25ef38ca333cd0f73169206425c29767
SHA1

745889b255d4b29fa1d4805656fb605cb3775742
SHA256

5c7aaf1de0fb1f9e1187c288347ef51960a41b8571c58dc2efab438437a1c4ec
SHA512

1bda4723d4fd7b35084fb50d102599810c3b759f247e25d430e3c9bd4c8a2873eca3009424922759efeb2883b27d9f26b63ebcbdaf8f3f98b4a9a76d4b70b804
SSDEEP

6144:cLF/G6hMvN0dF+2jGveHQ8hk+JTpqmMbEN4ipWEBX:c0AFlju8hk+LqUsSX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25ef38ca333cd0f73169206425c29767

Files

25ef38ca333cd0f73169206425c29767
.exe windows:4 windows x86 arch:x86

ed78f36623388540204342150ae9e29a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord644
ord572
ord100

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ