36f6768b0d410125fe4f8f3a5a310696 | Triage

Sharing

General

Target

36f6768b0d410125fe4f8f3a5a310696
Size

20KB
MD5

36f6768b0d410125fe4f8f3a5a310696
SHA1

43fc9cd0d178807f7dce9b6765f14734a89fb8d7
SHA256

e6eb763bdb7f5f6c418dcaad3efa6f52f9a8a1160e1eb1fca9229b5adc656d25
SHA512

ed689eef2319df90a0dbad62955b0a0a5ca222750d5bb0c89100a3ad838c900d7c7eab6ed09f3b79badefde0798bbae054708b4fafbe7b3d72c19af6d0a912e8
SSDEEP

192:+DtaoLyNiyPl3VadnDqA223t8niksSXUUt2mII:g9QanWAbtAiDSXUUtJII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36f6768b0d410125fe4f8f3a5a310696

Files

36f6768b0d410125fe4f8f3a5a310696
.exe windows:4 windows x86 arch:x86

1004cf09f979fc40dcad4b6f38bfd42b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord681
ord100
ord616

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ