280c3da5ea65c959067f8ab553037370 | Triage

Sharing

General

Target

280c3da5ea65c959067f8ab553037370
Size

320KB
MD5

280c3da5ea65c959067f8ab553037370
SHA1

7941c2b2118fd30c2b8c65a1beab08d9331203c9
SHA256

c390e62943f6c3cd8a21a5aed7b9d8528b30cae4bad6a5ba26f817d9bbf68d5f
SHA512

628bf2984f38a82cda34f4b1afbe6f1a810201a29b9ce2e0f6a9daee31b7a86fa60dd114888d3c0f77cb10d5a539b2cc0b255c29abeb58a13613f4fdc0447041
SSDEEP

6144:ym/o/vvofih8jWlw7WtoPkvVOfzUE8uoglOs5WY94/JzZwLZ5rLLVIqxE+1qg:5o/UWIkNOfzUEQgFGJNmjKqxE+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

280c3da5ea65c959067f8ab553037370

Files

280c3da5ea65c959067f8ab553037370
.exe windows:4 windows x86 arch:x86

d49fb21b085c8b00ba1b00866f4770ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA

msvbvm60

ord696
ord698
MethCallEngine
ord516
ord517
ord519
ord666
ord667
ord593
ord594
ord595
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord531
ord716
ord717
ProcCallEngine
ord644
ord537
ord681
ord576
ord685
ord100
ord610
ord616
ord617
ord618
ord580

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc..
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE