3679bfab1f27dfe9cdfd15a56980196b | Triage

Sharing

General

Target

3679bfab1f27dfe9cdfd15a56980196b
Size

157KB
MD5

3679bfab1f27dfe9cdfd15a56980196b
SHA1

e3d5c67a8996b437b9b13888cefc97907e37aa62
SHA256

536e5ce688b3b6d268c33da2c1747ca6af846fc87624479687d50a65459abf57
SHA512

09697a89a4e9d491f90ac575cbd2ae30eb594aa5230a591e95224f2d5b65196c44bcf767b2e9c562c5d218d2dfe03dcf6f6ebe4edaebaec29d469489506e0123
SSDEEP

3072:KGvfBicSmRmwZyrHFPwA2vNrGx234VFl6+7sNHrX0agi3nLGvfb7i+6fVATwrnHA:V4cmw0rl4A2vNKU1aQki3nLGvfbW5fSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3679bfab1f27dfe9cdfd15a56980196b

Files

3679bfab1f27dfe9cdfd15a56980196b
.exe windows:4 windows x86 arch:x86

ea24632d093e05ed21274283190f71fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

__vbaVarSub

Sections

.text
Size: 21KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE