29937f8f5df29ee4cac677b5c0e1fc21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29937f8f5df29ee4cac677b5c0e1fc21
Size

172KB
MD5

29937f8f5df29ee4cac677b5c0e1fc21
SHA1

9b432a57b7d038fdedebb668a7f04198ebd99044
SHA256

27b0e09a459ef6d10710042aafe4456492f9dd5e9671e329d1e27ab66df68cb6
SHA512

e6a41946cc4fd8dbbce88f208a7a81b9032338d8be31246b4d5f5b28b862b51b5be08f5c205246eba502394fb5d4f58f4effcd0271c144cc4c085be7076ccd93
SSDEEP

3072:CXOMb0tfHDJsBqoN1NjbgMWXhYgDJsBqoN1NjbgZ3:kbuHVOq4rbgMFgVOq4rbgZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29937f8f5df29ee4cac677b5c0e1fc21

Files

29937f8f5df29ee4cac677b5c0e1fc21
.exe windows:4 windows x86 arch:x86

f377228844119042c52b35e05f01e688

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord570
ord100
ord616
ord581

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ