27ed6b3ebc2f2287de95e344a1bd8cd8 | Triage

Sharing

General

Target

27ed6b3ebc2f2287de95e344a1bd8cd8
Size

212KB
MD5

27ed6b3ebc2f2287de95e344a1bd8cd8
SHA1

6fbfac49b73e12b6c32a94a0a67271d8ac500484
SHA256

b38bbd1d86ecfe6bf5697551a05dfb07d92ce8c104616c171c9d706ac3c199dc
SHA512

eb32577c8776f861a5177d5e27a90ea230f9b9acabe45cfc76d683b2a29792bd6a988ae42f9c60c118a687c59c850ba6614fb54e43de2b1e92cc49ce3e8d654b
SSDEEP

1536:wIdcFLZp0dsrYgdRAgH0/m38wIJVOy2JDVhCK8PTSuB:wIdcFLEdskgrt05bnwhVh6PTP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27ed6b3ebc2f2287de95e344a1bd8cd8

Files

27ed6b3ebc2f2287de95e344a1bd8cd8
.exe windows:4 windows x86 arch:x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE